RIPE-501 ICT L2 vendor support?

Eric Vyncke (evyncke) evyncke at
Mon Aug 20 12:42:38 CEST 2012

Hello Martin,

As discussed over a private email, I am resending the information for further interested people...

Regarding, the C vendor (assuming that you meant my employer), here are some switches supporting what we call First Hop Security (or SIFS also):
- Cat6K Sup2T supports everything you want since Summer 2011 (last year)
- WLC 7.2 (wireless) also since March 2012
- Cat 3750-X & 3560-X since last week :-) with 15.0(2)SE

More to come in the next months (Cat4K, Sup720, ...)

Hope this simply helps (it is not meant at all to be a marketing/sales thing)


PS: BTW, RIPE-501 is superseded by, RIPE-554

> -----Original Message-----
> From: at [mailto:ipv6-
> at] On Behalf Of Martin
> Millnert
> Sent: dimanche 19 août 2012 12:19
> To: ipv6-ops at
> Subject: RIPE-501 ICT L2 vendor support?
> Hi list,
> I'm trying to find a single vendor (at least) with LAN switches
> supporting -
> Requirements for enterprise/ISP grade "layer 2 switch" equipment.
> Ie (~cut'n'paste):
>       * MLDv2 snooping [RFC4541]
>       * DHCPv6 snooping [RFC3315]
>       * Router Advertisement (RA) filtering [RFC4862, RFC5006]
>       * Dynamic "IPv6 neighbour solicitation/advertisement" inspection
>         [RFC4862]
>       * Neighbour Unreachability Detection [NUD, RFC4861] filtering
>       * Duplicate Address Detection [DAD, RFC4429] snooping and
>         filtering
> I'm having trouble finding support for essentially anything except RA
> Guard and MLDv2 snooping.
> J for sure isn't compliant (well-known), but I'm not finding vendor C
> support either.  Or a couple others. Is there any?
> Best,
> Martin

More information about the ipv6-ops mailing list