IPv6 Type 0 Routing Header issues
Patrick Grossetete
pgrosset at cisco.com
Mon Apr 30 19:03:48 CEST 2007
Ack, forwarding your request to our engineering team
Regards
Patrick
At 06:44 PM 4/30/2007, Hank Nussbacher wrote:
>On Mon, 30 Apr 2007, Patrick Grossetete wrote:
>
>When fixing IPv6, plz fix the ACL show syntax:
>
>petach-tikva-gp#sho ipv6 access-l filter-rh
>IPv6 access list filter-rh
> deny ipv6 any any log routing sequence 10
> permit ipv6 any any (186343 matches) sequence 20
>
>which shows like that even though the input syntax is reversed (and
>normal) as: "deny ipv6 any any routing log"
>
>That was taken from 12.2(18)SXE6b.
>
>-Hank
>
>> Gert,
>>
>> I will recommend looking at the PSIRT published in January
>> <http://www.cisco.com/warp/public/707/cisco-sa-20070124-IOS-IPv6.shtml>http://www.cisco.com/warp/public/707/cisco-sa-20070124-IOS-IPv6.shtml
>> to find what is available from a given IOS release. I understand
>> we need to get "no ipv6 source-route"
>>as default across all release trains but can't state when it will happen.
>>
>>Regards
>>Patrick
>>
>>
>>At 05:30 PM 4/30/2007, Gert Doering wrote:
>>>Hi,
>>>On Mon, Apr 30, 2007 at 05:26:01PM +0200, Sebastian Wiesinger wrote:
>>> > > Unfortunately, not supported in 12.2 SXE/SXF versions for the large
>>> > > 6500/7600 groupies here.
>>> >
>>> > Alternative:
>>> >
>>> > ipv6 access-list ipv6-infrastructure-acl-policy
>>> > deny ipv6 any any routing-type 0
>>> > [..]
>>> > !
>>>Good plan... if it would work.
>>>Cisco-M-XXI(config)#ipv6 access-list ipv6-infrastructure-acl-policy
>>>Cisco-M-XXI(config-ipv6-acl)# deny ipv6 any any routing-type 0
>>> ^
>>>- all the nice and shiny IPv6 filtering stuff isn't available in
>>>12.2S-based releases yet. Thanksverymuch.
>>>Gert Doering
>>> -- NetMaster
>>>--
>>>Total number of prefixes smaller than registry allocations: 113403
>>>SpaceNet AG Vorstand: Sebastian v. Bomhard
>>>Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
>>>D-80807 Muenchen HRB: 136055 (AG Muenchen)
>>>Tel: +49 (89) 32356-444 USt-IdNr.: DE813185279
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.cluenet.de/pipermail/ipv6-ops/attachments/20070430/b7b32d4d/attachment.htm>
More information about the ipv6-ops
mailing list