DHCPv6 for IPv6 routing information, was Re: Mysterious missing DHCPv6 feature

[Martin Millnert]

On Mon, 2010-05-17 at 11:08 +0100, Nick Hilliard wrote:
> Being an ixp operator, I would really really like RA guard implemented
> on my kit, so that accidents don't happen.
> 
> Nick

For an accident to happen, obviously both a device sending a RA and,
more importantly, a device accepting that RA is necessary.

Whether your stack accepts an RA or not is something the stack ought to
let you configure, like Linux does:
anticimex at hsa:~$ ls /proc/sys/net/ipv6/conf/eth0/accept_ra*
/proc/sys/net/ipv6/conf/eth0/accept_ra
/proc/sys/net/ipv6/conf/eth0/accept_ra_defrtr
/proc/sys/net/ipv6/conf/eth0/accept_ra_pinfo
/proc/sys/net/ipv6/conf/eth0/accept_ra_rt_info_max_plen
/proc/sys/net/ipv6/conf/eth0/accept_ra_rtr_pref

By this, my point is that accidents that don't kill the fabric could
conceivably be thought of as not-your-problem.  But then we leave the
engineers desk and enter the real world...

Cheers,
-- 
Martin Millnert <martin at millnert.se>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://lists.cluenet.de/pipermail/ipv6-ops/attachments/20100517/03fb2399/attachment.bin