RIPE-501 ICT L2 vendor support?

[Eric Vyncke (evyncke)]

Hello Martin,

As discussed over a private email, I am resending the information for further interested people...

Regarding, the C vendor (assuming that you meant my employer), here are some switches supporting what we call First Hop Security (or SIFS also):
- Cat6K Sup2T supports everything you want since Summer 2011 (last year)
- WLC 7.2 (wireless) also since March 2012
- Cat 3750-X & 3560-X since last week :-) with 15.0(2)SE
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/15.0_2_se/release/notes/OL25302.html#wp1009434

More to come in the next months (Cat4K, Sup720, ...)

Hope this simply helps (it is not meant at all to be a marketing/sales thing)

-éric

PS: BTW, RIPE-501 is superseded by, RIPE-554

> -----Original Message-----
> From: ipv6-ops-bounces+evyncke=cisco.com at lists.cluenet.de [mailto:ipv6-
> ops-bounces+evyncke=cisco.com at lists.cluenet.de] On Behalf Of Martin
> Millnert
> Sent: dimanche 19 août 2012 12:19
> To: ipv6-ops at lists.cluenet.de
> Subject: RIPE-501 ICT L2 vendor support?
> 
> Hi list,
> 
> I'm trying to find a single vendor (at least) with LAN switches
> supporting http://www.ripe.net/ripe/docs/ripe-501#layer2ent -
> Requirements for enterprise/ISP grade "layer 2 switch" equipment.
> 
> Ie (~cut'n'paste):
>       * MLDv2 snooping [RFC4541]
>       * DHCPv6 snooping [RFC3315]
>       * Router Advertisement (RA) filtering [RFC4862, RFC5006]
>       * Dynamic "IPv6 neighbour solicitation/advertisement" inspection
>         [RFC4862]
>       * Neighbour Unreachability Detection [NUD, RFC4861] filtering
>       * Duplicate Address Detection [DAD, RFC4429] snooping and
>         filtering
> 
> I'm having trouble finding support for essentially anything except RA
> Guard and MLDv2 snooping.
> 
> J for sure isn't compliant (well-known), but I'm not finding vendor C
> support either.  Or a couple others. Is there any?
> 
> 
> Best,
> Martin