Shane Kerr shane at time-travellers.org
Wed Nov 16 09:41:12 CET 2011


On Tue, 2011-11-15 at 11:46 -0500, Mark Kamichoff wrote:
> What do folks think about using RAs+DHCPv6+DDNS for IPv6 addressing in
> enterprise data centers vs traditional static addressing?

I think it makes sense, for all the reasons DHCPv4+DDNS makes sense.

> To further complicate the issue, firewall policies can also throw a
> wrench into this.  In the case of stateless DHCPv6 each server might
> still use EUI-64 (not even thinking about privacy extensions!) for the
> last 64-bits of the address.  Firewall policies will then have to rely
> on DNS since it would be absurd to swap out a NIC and have to update
> firewall configuration.  With stateful DHCPv6 and the server assigning
> IPv6 addresses to servers, firewall policies would still have to rely on
> DNS or the addition of each server would require a reservation during
> provisioning to always be guaranteed to receive the same address.

I'm curious... how is this any different from IPv4?


More information about the ipv6-ops mailing list