[135490] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

IPv6 filtering

daemon@ATHENA.MIT.EDU (Franck Martin)
Wed Jan 26 00:03:59 2011

X-Barracuda-Envelope-From: franck@genius.com
Date: Wed, 26 Jan 2011 18:03:50 +1300 (FJST)
From: Franck Martin <franck@genius.com>
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


    =E2=80=A2 ipv6 41 IPv6 # IPv6=20
    =E2=80=A2 ipv6-route 43 IPv6-Route # Routing Header for IPv6=20
    =E2=80=A2 ipv6-frag 44 IPv6-Frag # Fragment Header for IPv6=20
    =E2=80=A2 ipv6-crypt 50 IPv6-Crypt # Encryption Header for IPv6=20
    =E2=80=A2 ipv6-auth 51 IPv6-Auth # Authentication Header for IPv6=20
    =E2=80=A2 ipv6-icmp 58 IPv6-ICMP icmpv6 icmp6 # ICMP for IPv6=20
    =E2=80=A2 ipv6-nonxt 59 IPv6-NoNxt # No Next Header for IPv6=20
    =E2=80=A2 ipv6-opts 60 IPv6-Opts # Destination Options for IPv6=20

Ok filtering ipv6 and ipv6-icmp is understood, it is like ipv4.=20

But what about the others, should they be blocked, restricted?=20

Does a ios "deny ipv6 any any" affect them?


home help back first fref pref prev next nref lref last post