[186526] in North American Network Operators' Group
Re: Nat
daemon@ATHENA.MIT.EDU (Mark Andrews)
Mon Dec 21 14:12:53 2015
X-Original-To: nanog@nanog.org
To: Alan Buxey <A.L.M.Buxey@lboro.ac.uk>
From: Mark Andrews <marka@isc.org>
In-reply-to: Your message of "Mon, 21 Dec 2015 16:55:43 -0000."
<4102D692-A315-4C38-A2CB-54F96999E251@lboro.ac.uk>
Date: Tue, 22 Dec 2015 06:12:42 +1100
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
We already have CPE vendors shipping with "guest" ssids. These
require a seperate /64 and are usually treated as external to the
home network. With IPv4 you grab a seperate chunck of rfc1918 space
and nat that as well as the main chuck of space. For IPv6 you need
multiple /64s from the ISP. A single /64 is not enough. This is
all done with a point and click interface.
If you are a ISP that supplies a single /64 then you really should
stop showing your lack of clue to all and sundry by supplying
multiple /64s.
If you are a ISP that doesn't supply IPv6 at all then you really
are not doing your job as a ISP.
Mark
In message <4102D692-A315-4C38-A2CB-54F96999E251@lboro.ac.uk>, Alan Buxey write
s:
> I'm surprised that noone of the home wifi router folk haven't cornered the ma
> rket on that one in terms of client separation. Most people don't need the d
> evices to talk to each other so by default all ports on different VLANs .. 19
> 2.168.0-8.x etc
>
> Internet of things security out of the box. Web interface to change port memb
> ership for those that DO need inter device access
>
> Or maybe there are such defaults out there from some suppliers i'm not famili
> ar with? :)
>
> alan
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka@isc.org
