[128316] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Addressing plan exercise for our IPv6 course

daemon@ATHENA.MIT.EDU (Leo Bicknell)
Fri Jul 30 08:42:40 2010

Date: Fri, 30 Jul 2010 05:42:30 -0700
From: Leo Bicknell <bicknell@ufp.org>
To: nanog list <nanog@nanog.org>
Mail-Followup-To: nanog list <nanog@nanog.org>
In-Reply-To: <AANLkTikvDUTBrbs_4skVOfzoi3D0wUtr0v7BKL8+mO5C@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


--KsGdsel6WgEHnImy
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

In a message written on Fri, Jul 30, 2010 at 09:13:54AM +0100, Matthew Wals=
ter wrote:
> On 30 July 2010 08:32, Jeroen Massar <jeroen@unfix.org> wrote:
> > On 2010-07-30 09:27, Matthew Walster wrote:
> >> On 29 July 2010 18:08, Leo Vegoda <leo.vegoda@icann.org> wrote:
> >> With all due respect, I can't see it. Why would a home user need
> >> multiple subnets?
> >
> > * Wireless
> > * Wired
> > * DMZ
> >
> > Those three I see a lot at various people's places.
>=20
> I have *never* seen those three security zones separated outside of a
> business or the house of a nerd who runs his own Linux distro
> (Smoothwall etc). Furthermore, you're then pushing all that traffic
> into a $30 router which almost guaranteed will be underpowered.

I know of at least one nationwide DSL provider that ships (with
higher end products) a WiFi router with a single checkbox for "guest
network", which provides a captive portal style guest WiFi network
for folks who visit your house.  The same box has had for years a
"DMZ" function for your gaming console/machine.

The guest network is a separate subnet.  The DMZ today is not, it's
the wierd IPv4 pass-through thing many NAT boxes do to make weird
games work.

Still, it's all in a box thats given away for free by an ISP to a
new signup; and with IPv6 having more addresses I see no reason
each might not be its own subnet in 5-10 more years when IPv6 has
taken hold.

--=20
       Leo Bicknell - bicknell@ufp.org - CCIE 3440
        PGP keys at http://www.ufp.org/~bicknell/

--KsGdsel6WgEHnImy
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)
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=lI/+
-----END PGP SIGNATURE-----

--KsGdsel6WgEHnImy--


home help back first fref pref prev next nref lref last post