Hey!
New message, please read <http://mastairconditioning.com/pleasant.php?8fg>
Soucy Ray
Hey!
New message, please read <http://tunlock.com/less.php?d4>
Soucy Ray
Hey!
New message, please read <http://www.autler-kfz.at/secret.php?ocvo>
Soucy Ray
Response inline.
-Original Message-
From: Carl Rosevear [mailto:carl.rosev...@demandmedia.com]
Sent: Tuesday, February 17, 2009 11:59 AM
To: nanog@nanog.org
Subject: IPv6 Confusion
How does IPv6 addressing work?
RFC 2372 is a good starting point.
With IPv6 we provide for every LAN
It's scenario 2 I'm worried about, all those machanisms haven't been
implemented for IPv6 as far as I know and if you're only doing 2.2-2.5
then you're open to the IPv6 security issue I described.
We've been seeing problems with this for the last year or so (since
Vista started showing up).
For IOS, have you tried the command:
int gi0/1
ipv6 nd ra suppress
I think this only applies to RA originating from the L3 interface in
question... not an L2 interface. I could be mistaken. I'll have to
poke at it.
Indeed, this is a problem.
RA Guard is a very straight-forward, hopefully
soon-to-be-widely-supported,
defense.
http://tools.ietf.org/html/draft-ietf-v6ops-ra-guard-01
Thanks for pointing us to this. It's encouraging to know that it is
being worked on.
Ray
We peer with Cogent. They are very competitive in terms of pricing.
To be honest, Cogent has been pretty good to us. As long as you have a
2nd peer (which it sounds like you do) for backup I'd say they're a
pretty safe bet.
The only problem I've had with Cogent is that they're still not ready
We spent a good amount of time looking into deploying a home-grown
Linux-based CPE device over the summer.
Generally, Linux is not the issue with performance. You want to focus
on your hardware.
We've seen the best performance with Intel MT series PCI-X server NICs.
When we were testing the
9 matches
Mail list logo
