[152186] in North American Network Operators' Group
Re: Automatic IPv6 due to broadcast
daemon@ATHENA.MIT.EDU (Mick O'Rourke)
Tue Apr 17 07:57:03 2012
In-Reply-To: <EAF65A33-191D-4C06-960B-10E0102ABB52@puck.nether.net>
From: "Mick O'Rourke" <mkorourke+nanog@gmail.com>
Date: Tue, 17 Apr 2012 21:55:29 +1000
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
RA guard is useful if your tcam capacity and or switching platform allows -
http://tools.ietf.org/html/draft-ietf-v6ops-ra-guard-implementation-01
An older yet still a good read from Cisco on some IPv6 first hop security:
http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-first_hop_security.html#wp1054246
Mick
