Re: Web Server addresses : Unicast , Multicast , Anycast

2003-01-20 Thread Digambar Rasal
Hi I am developing a Web server , router , load balancers, Gateway and Switch testing software. I have read the RFC reagrding the addressing in IPv6 and I understood that Web servers , routers , load balancers, Gateways and Switches can have either Unicast or Multicast or Anycast address. I am

Questions on Link Local Address and Prefix

2003-01-20 Thread Siva Veerepalli
Draft 11 of the Addressing Architecture says the following: a. The prefix length of link-local is 10 bits i.e., FE80::/10 (sec 2.4) b. For all unicast addresses, except those that start with binary value 000, Interface IDs are required to be 64 bits long and to be constructed in Modified EUI-64

What about using RA for DNS Resolver Discovery ?

2003-01-20 Thread BELOEIL Luc FTRD/DMI/CAE
Hi all, DNS Discovery Design Team studied the opportunity to use RA so as to advertise DNS resolver IPv6 addresses in 2001. But no proposition has followed. The only propositions today are to use well-known addresses or DHCPv6. I believe that such a solution may be still interesting. I've propo

Re: I-D ACTION:draft-ietf-ipv6-flow-label-04.txt

2003-01-20 Thread Thomas Narten
> So how about this: > "The 20-bit Flow Label field in the IPv6 header [IPv6] is used by a > source to label packets of a flow. Packet classifiers use the triplet > of Flow Label, Source Address, and Destination Address fields to > identify which flow a particular packet belongs to. Packets are

Re: Question about IPsec in IPv6

2003-01-20 Thread Francis Dupont
In your previous mail you wrote: > => I disagree: without authentication (by a pre-shared > secret, certificate/signature or public key) you can be > attacked by the Man-In-The-Middle, i.e., you can get a very > secure connection with a bad guy, not the intended > correspondent

RE: Question about IPsec in IPv6

2003-01-20 Thread Mario Goebbels
> => I disagree: without authentication (by a pre-shared > secret, certificate/signature or public key) you can be > attacked by the Man-In-The-Middle, i.e., you can get a very > secure connection with a bad guy, not the intended > correspondent. There are some schemes where one participant >

Re: Question about IPsec in IPv6

2003-01-20 Thread Francis Dupont
In your previous mail you wrote: I want to know if there have been made additions to the IPsec part on IPv6. Something that bugs me to Ipsec on IPv4 is that it either required some system backed authentication (Kerberos), some CA issued certificate or the worst solution being a static

Question about IPsec in IPv6

2003-01-20 Thread Mario Goebbels
Hi! I want to know if there have been made additions to the IPsec part on IPv6. Something that bugs me to Ipsec on IPv4 is that it either required some system backed authentication (Kerberos), some CA issued certificate or the worst solution being a static keyphrase. Now to my question: Does IPsec