RIPE-501 ICT L2 vendor support?
Martin Millnert
martin at millnert.se
Sun Aug 19 12:47:03 CEST 2012
Tayeb,
S5300 seems old, I checked S5700 and found in the security documentation
support for ND snooping solving also RA guard by having trusted or
untrusted interfaces. That's nice, but we're still missing
DHCPv6/NUD/DAD snooping&filtering.
Next?
/M
On Sun, 2012-08-19 at 11:22 +0100, Tayeb Meftah wrote:
> Maybe huaoui S5300
>
> Envoyé de mon iPhone
>
> Le 19 août 2012 à 11:19, Martin Millnert <martin at millnert.se> a écrit :
>
> > Hi list,
> >
> > I'm trying to find a single vendor (at least) with LAN switches
> > supporting http://www.ripe.net/ripe/docs/ripe-501#layer2ent -
> > Requirements for enterprise/ISP grade "layer 2 switch" equipment.
> >
> > Ie (~cut'n'paste):
> > * MLDv2 snooping [RFC4541]
> > * DHCPv6 snooping [RFC3315]
> > * Router Advertisement (RA) filtering [RFC4862, RFC5006]
> > * Dynamic "IPv6 neighbour solicitation/advertisement" inspection
> > [RFC4862]
> > * Neighbour Unreachability Detection [NUD, RFC4861] filtering
> > * Duplicate Address Detection [DAD, RFC4429] snooping and
> > filtering
> >
> > I'm having trouble finding support for essentially anything except RA
> > Guard and MLDv2 snooping.
> >
> > J for sure isn't compliant (well-known), but I'm not finding vendor C
> > support either. Or a couple others. Is there any?
> >
> >
> > Best,
> > Martin
> >
More information about the ipv6-ops
mailing list