How to preempt rogue RAs?

sthaug at nethelp.no sthaug at nethelp.no
Sun Oct 31 11:18:56 CET 2010


> > I sympathize with the state the ISP is in, but it's generally a better idea
> > to fix the underlying problem (shared L2) rather than find
> > complicated/obscure/proprietary workarounds.  In fact, this existing IPv6
> > brokenness could be the carrot for operations to hang in front of management
> > to solve that underlying problem. 
> 
> Agree, VLANs are pretty cheap. Their sub-interfaces on the router's
> also give you individual per-customer traffic monitoring and policy
> enforcement points.

I think we can all agree that fixing the shared L2 is the best solution.
Unfortunately, that also normally means changing IPv4 addresses, which
customers tend not to like.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no


More information about the ipv6-ops mailing list