IPv6 Source Address Selection on Mac OS X Lion

[Dick Visser]

Hi Christoph

On 2011-12-14 15:00, Christoph Stahl wrote:
> The goal is to use a stateless autoconfigured IPv6 Adress to "surf the
> the internet" and a statically configured IPv6 Adress to reach the IPv6
> (or dual stacked) hosts that use IPs belonging to our assigned
> IPv6-prefix. So that we can configure the static "admin" IPv6 address in
> firewalls or host.allows, but surf the web with all the benefits of the
> automatic privacy extension.

Maybe I misunderstand the problem, but why don't you dedicate a /64 to
the "admin" network, use autoconfigured addresses, and filter the /64 in
firewalls/hosts.allows?
That would mean less configuration, and easier filtering.

Cheers,

-- 
Dick Visser
System & Network Engineer
TERENA Secretariat
Singel 468D, 1017 AW Amsterdam
The Netherlands
T +31 20 530 44 88 F +31 20 530 44 99
visser at terena.org | www.terena.org


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6692 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.cluenet.de/pipermail/ipv6-ops/attachments/20111216/babbcf3e/attachment.p7s>