[168022] in North American Network Operators' Group
Re: turning on comcast v6
daemon@ATHENA.MIT.EDU (Leo Bicknell)
Mon Jan 6 10:45:10 2014
From: Leo Bicknell <bicknell@ufp.org>
In-Reply-To: <30517.1388987046@turing-police.cc.vt.edu>
Date: Mon, 6 Jan 2014 09:44:32 -0600
To: Valdis.Kletnieks@vt.edu
Cc: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_149E4E70-5161-4BEC-B8E1-56C089E4A26F
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
charset=iso-8859-1
On Jan 5, 2014, at 11:44 PM, Valdis.Kletnieks@vt.edu wrote:
> If Joe Home User has a rogue device spewing RA's, he probably has a bigger
> problem than just not having RA Guard enabled. He either has a badly
> misconfigured router (and one that's disobeying the mandate to not RA
> if you don't have an uplink), or he has a compromised malicious host.
>
> In either case, he's got bigger fish to fry.
"mandate" isn't the right description.
http://tools.ietf.org/html/rfc6059
There is a ~3 year old _proposed standard_ for the behavior you describe.
I have yet to see any compliant equipment at $LocalBigBox, but maybe I'm
not purchasing the right gear.
So yet again, the response I get to "ra's are fragile" is "deploy this
brand new band-aid that can't be purchased yet".
Can we just have DHCPv6, please? How many dozens of technologies are we
going to invent to try and avoid putting a default route in DHCP?
--
Leo Bicknell - bicknell@ufp.org - CCIE 3440
PGP keys at http://www.ufp.org/~bicknell/
--Apple-Mail=_149E4E70-5161-4BEC-B8E1-56C089E4A26F
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----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=JOYA
-----END PGP SIGNATURE-----
--Apple-Mail=_149E4E70-5161-4BEC-B8E1-56C089E4A26F--
