[152195] in North American Network Operators' Group
Re: Automatic IPv6 due to broadcast
daemon@ATHENA.MIT.EDU (Anurag Bhatia)
Tue Apr 17 21:48:50 2012
In-Reply-To: <CAM7FjJeRxeK_QGOpCsDaSeU7kjZpTzQQo4SzGDAhwpsM=M37cQ@mail.gmail.com>
Date: Wed, 18 Apr 2012 07:17:58 +0530
From: Anurag Bhatia <me@anuragbhatia.com>
To: NANOG Mailing List <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Thanks for useful reply everyone!
As I mentioned - I applied quick temporary fix by stop broadcast from
router and clearing of routing table on servers. Will apply disabling of
autoconfig now.
On Tue, Apr 17, 2012 at 5:25 PM, Mick O'Rourke <mkorourke+nanog@gmail.com>wrote:
> RA guard is useful if your tcam capacity and or switching platform allows -
> http://tools.ietf.org/html/draft-ietf-v6ops-ra-guard-implementation-01
>
> An older yet still a good read from Cisco on some IPv6 first hop security:
>
> http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-first_hop_security.html#wp1054246
>
> Mick
>
--
Anurag Bhatia
anuragbhatia.com
or simply - http://[2001:470:26:78f::5] if you are on IPv6 connected
network!
Twitter: @anurag_bhatia <https://twitter.com/#!/anurag_bhatia>
Linkedin: http://linkedin.anuragbhatia.com