How to preempt rogue RAs?

[sthaug at nethelp.no]

> > I sympathize with the state the ISP is in, but it's generally a better idea
> > to fix the underlying problem (shared L2) rather than find
> > complicated/obscure/proprietary workarounds.  In fact, this existing IPv6
> > brokenness could be the carrot for operations to hang in front of management
> > to solve that underlying problem. 
> 
> Agree, VLANs are pretty cheap. Their sub-interfaces on the router's
> also give you individual per-customer traffic monitoring and policy
> enforcement points.

I think we can all agree that fixing the shared L2 is the best solution.
Unfortunately, that also normally means changing IPv4 addresses, which
customers tend not to like.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no