IPv6 Firewall on CPEs - Default on or off

Fernando Gont fernando at gont.com.ar
Sat Dec 1 06:48:42 CET 2012


On 11/30/2012 09:28 AM, Andre Tomt wrote:
> I do wish the ND table issue was nonexistent and SLAAC assigned
> random-but-persistent addresses (there is an RFC for it, I think), but
> alas, here we are, in the real world, deploying IPv6 today..

There's an *I-D* that I wished 6man progressed soon:
draft-ietf-6man-stable-privacy-addresses.

FWIW, Microsoft does "randombut-persistent-across-networks", which,
while better than traditional MAC-address-derives addresses, is still
not good enough.

Cheers,
-- 
Fernando Gont
e-mail: fernando at gont.com.ar || fgont at si6networks.com
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1





More information about the ipv6-ops mailing list