[195732] in North American Network Operators' Group
Re: IPv6 Loopback/Point-to-Point address allocation
daemon@ATHENA.MIT.EDU (Thomas Bellman)
Sun Sep 10 08:12:40 2017
X-Original-To: nanog@nanog.org
Date: Sun, 10 Sep 2017 12:56:08 +0200
From: Thomas Bellman <bellman@nsc.liu.se>
To: nanog@nanog.org
In-Reply-To: <CAPkb-7Cc+VmfONHH8ZCMATOHsSzSmRv9_D+wOQ7-XbwOy45g7A@mail.gmail.com>
Errors-To: nanog-bounces@nanog.org
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--5hDOEBnFj8W7gddT8RdwTDQuiLVpvM88S
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
On 2017-09-10 00:09, Baldur Norddahl wrote:
> You want to configure point to point interfaces as /127 or /126 even if=
you
> allocate a full /64 for the link. This prevents an NDP exhaustion attac=
k
> with no downside.
An alternative is to just have link-local addresses on your point-to-
point links. At least on your internal links where you run your IGP.
On external links, where you run eBGP or static routes, it's probably
more trouble than it is worth, though, since link-local addresses can
change if you replace the hardware, requiring a config change on the
other end. (Also, I'm not sure all BGP implementations support using
link-local addresses.)
/Bellman
--5hDOEBnFj8W7gddT8RdwTDQuiLVpvM88S
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=i5wT
-----END PGP SIGNATURE-----
--5hDOEBnFj8W7gddT8RdwTDQuiLVpvM88S--
