[193556] in North American Network Operators' Group
Re: IPv6-enabled multi-factor providers (not DUO)
daemon@ATHENA.MIT.EDU (David Sotnick)
Thu Feb 2 20:52:39 2017
X-Original-To: nanog@nanog.org
In-Reply-To: <CAL9jLabkqtXLgPXn5Q8OtFUgrf5k23vCBFoO4WisahUhKcFXAQ@mail.gmail.com>
From: David Sotnick <sotnickd-nanog@ddv.com>
Date: Thu, 2 Feb 2017 17:52:33 -0800
To: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
Ahhh, a recent development =E2=80=94 that's great news! Yes, it should be
exceedingly simple for Duo to implement IPv6 :-)
Thanks for the edification, all!
-Dave
On Thu, Feb 2, 2017 at 11:41 AM, Christopher Morrow <morrowc.lists@gmail.co=
m
> wrote:
>
>
> On Thu, Feb 2, 2017 at 11:32 AM, David Sotnick <sotnickd-nanog@ddv.com>
> wrote:
>
>> Hi NANOG,
>>
>> (Apologies if this is slightly off-topic; there are a lot of
>> IPv6-advocates
>> here who might have some insights).
>>
>> At my day job, we use Duo Security for MFA. It works well, with the
>> caveats
>> that it's cloud-based and heavily dependent on Amazon AWS.
>>
>>
> https://aws.amazon.com/blogs/aws/new-ipv6-support-for-ec2-
> instances-in-virtual-private-clouds/
>
> should be all set, right?
>
>
>> We had an IPv4 outage last weekend and of course our Duo MFA only suppor=
ts
>> IPv4 and given their dependence on AWS I'm not hopeful that they'll have
>> IPv6 access to their API servers any time this year. If they had, my
>> weekend would have gone a lot easier.
>>
>> What MFA alternatives are out there that support IPv6? If we found a
>> suitable alternative, I'm sure we'd consider shifting our business their
>> way.
>>
>> Thanks!
>>
>> -Dave
>>
>
>
