RA+DHCPv6+DDNS in DCs
shane at time-travellers.org
Wed Nov 16 09:41:12 CET 2011
On Tue, 2011-11-15 at 11:46 -0500, Mark Kamichoff wrote:
> What do folks think about using RAs+DHCPv6+DDNS for IPv6 addressing in
> enterprise data centers vs traditional static addressing?
I think it makes sense, for all the reasons DHCPv4+DDNS makes sense.
> To further complicate the issue, firewall policies can also throw a
> wrench into this. In the case of stateless DHCPv6 each server might
> still use EUI-64 (not even thinking about privacy extensions!) for the
> last 64-bits of the address. Firewall policies will then have to rely
> on DNS since it would be absurd to swap out a NIC and have to update
> firewall configuration. With stateful DHCPv6 and the server assigning
> IPv6 addresses to servers, firewall policies would still have to rely on
> DNS or the addition of each server would require a reservation during
> provisioning to always be guaranteed to receive the same address.
I'm curious... how is this any different from IPv4?
More information about the ipv6-ops