RIPE-501 ICT L2 vendor support?

Tayeb Meftah tayeb.meftah at gmail.com
Mon Aug 20 12:56:39 CEST 2012


Thx Eric!

Envoyé de mon iPhone

Le 20 août 2012 à 11:43, "Eric Vyncke (evyncke)" <evyncke at cisco.com> a écrit :

> Hello Martin,
>
> As discussed over a private email, I am resending the information for further interested people...
>
> Regarding, the C vendor (assuming that you meant my employer), here are some switches supporting what we call First Hop Security (or SIFS also):
> - Cat6K Sup2T supports everything you want since Summer 2011 (last year)
> - WLC 7.2 (wireless) also since March 2012
> - Cat 3750-X & 3560-X since last week :-) with 15.0(2)SE
> http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_2_se/release/notes/OL25302.html#wp1009434
>
> More to come in the next months (Cat4K, Sup720, ...)
>
> Hope this simply helps (it is not meant at all to be a marketing/sales thing)
>
> -éric
>
> PS: BTW, RIPE-501 is superseded by, RIPE-554
>
>> -----Original Message-----
>> From: ipv6-ops-bounces+evyncke=cisco.com at lists.cluenet.de [mailto:ipv6-
>> ops-bounces+evyncke=cisco.com at lists.cluenet.de] On Behalf Of Martin
>> Millnert
>> Sent: dimanche 19 août 2012 12:19
>> To: ipv6-ops at lists.cluenet.de
>> Subject: RIPE-501 ICT L2 vendor support?
>>
>> Hi list,
>>
>> I'm trying to find a single vendor (at least) with LAN switches
>> supporting http://www.ripe.net/ripe/docs/ripe-501#layer2ent -
>> Requirements for enterprise/ISP grade "layer 2 switch" equipment.
>>
>> Ie (~cut'n'paste):
>>      * MLDv2 snooping [RFC4541]
>>      * DHCPv6 snooping [RFC3315]
>>      * Router Advertisement (RA) filtering [RFC4862, RFC5006]
>>      * Dynamic "IPv6 neighbour solicitation/advertisement" inspection
>>        [RFC4862]
>>      * Neighbour Unreachability Detection [NUD, RFC4861] filtering
>>      * Duplicate Address Detection [DAD, RFC4429] snooping and
>>        filtering
>>
>> I'm having trouble finding support for essentially anything except RA
>> Guard and MLDv2 snooping.
>>
>> J for sure isn't compliant (well-known), but I'm not finding vendor C
>> support either.  Or a couple others. Is there any?
>>
>>
>> Best,
>> Martin
>


More information about the ipv6-ops mailing list