[143414] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: IPv6 end user addressing

daemon@ATHENA.MIT.EDU (Chris Adams)
Tue Aug 9 08:44:52 2011

Date: Tue, 9 Aug 2011 07:44:05 -0500
From: Chris Adams <cmadams@hiwaay.net>
To: nanog@nanog.org
Mail-Followup-To: Chris Adams <cmadams@hiwaay.net>, nanog@nanog.org
In-Reply-To: <CAAAwwbUbrzx1Eiqi0JV8y2-ym7MP8x3jPqpVzKW2efH2huskow@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

Once upon a time, Jimmy Hess <mysidia@gmail.com> said:
> If you must not have someone plugging into your server LAN without
> permission, you
> turn unused ports off, or preferably, place them in a VLAN island with
> no topological
> connection to anything.

That's about what I do; unused ports are in a different VLAN.  I have a
separate LAN for notebooks, etc. that has DHCP (and will have a v6 /64
when I get v6 to that point).

-- 
Chris Adams <cmadams@hiwaay.net>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.


home help back first fref pref prev next nref lref last post