[152376] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: JUNOS forwards IPv6 link-local packets

daemon@ATHENA.MIT.EDU (Jack Bates)
Fri Apr 27 12:32:33 2012

Date: Fri, 27 Apr 2012 11:31:32 -0500
From: Jack Bates <jbates@brightok.net>
To: nanog@nanog.org
In-Reply-To: <20120427162050.GC29251@hiwaay.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On 4/27/2012 11:20 AM, Chris Adams wrote:
> Once upon a time, Jack Bates<jbates@brightok.net>  said:
>> fe80::/65 discard
>> fe80:0:0:0:8000::/65 discard
>>
>> More specifics rule out over connected any day.
> That would also kill any legitimate link-local traffic though.

Perhaps. I'm actually curious on that, as the rules for routing to 
link-local are very specialized. It might flag on uRPF for local 
traffic, but that can be overcome with a fail filter. Sending out from 
the RE could likely ignore the route, as it has to send to specific 
interfaces. Receiving on interfaces that don't have uRPF should still 
work as well.

It's a theory and would have to be tested.

Jack


home help back first fref pref prev next nref lref last post