Current IPv6 deployment methods in datacentres.

Phil Mayers p.mayers at
Mon Nov 12 15:11:25 CET 2012

On 12/11/12 13:55, Gert Doering wrote:

-challenged networks...  Sup720 cannot do IPv6 uRPF in Hardware,
> so you have to do per-customer incoming ACLs to stop spoofing at the
> source.  Can be done, is much more painful than "just turn on uRPF".

You also run into ACL label limits in big installs (you can have many 
fewer labels the SVIs, and burn one label per interface type & ACL combo).

More information about the ipv6-ops mailing list