Anand Kumria wrote :-

>The site-local prefix (fe80) has been deprecated (rfc3879), instead you
want IPv6 local addresses (rfc4193) which you
>can self-generate with tools such as:
>
http://www.hznet.de/tools/generate-uniq-local-ipv6-unicast-addr.sh
  

Hmm, I dropped off the IETF announce lists a few years ago so I have
missed this fairly significant change. One thing I noticed though was
that this script doesn't comply with the mentioned RFC. I am guessing it
may have been written against an earlier draft (yep, the script says
Sept. 2004). 

While it creates a pseudo-random address, a few problems I see are that
it uses FD00::/8 as the prefix (instead of FC00::/7 which means it only
tries to use half of the available space) and MD5 instead of SHA1 as the
digest/randomizer. I know I am pedantic but one of the assumptions in
this RFC (section 3.2.1) is that all generators of locally assigned
global IDs use the same algorithm.

It seems like it might be useful for me (or someone) to create an
up-to-date version of this script over the Christmas break!

Regards, Martin

Martin Visser, CISSP
Network and Security Consultant 
Consulting & Integration
Technology Solutions Group - HP Services

410 Concord Road
Rhodes NSW  2138
Australia 

Mobile: +61-411-254-513
Fax: +61-2-9022-1800     
E-mail: martin.visserAThp.com

This email (including any attachments) is intended only for the use of
the individual or entity named above and may contain information that is
confidential, proprietary or privileged. If you are not the intended
recipient, please notify HP immediately by return email and then delete
the email, destroy any printed copy and do not disclose or use the
information in it.

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to