<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Hi!<br>
I'm sure all of you know this presentation.<br>
but it is related to this issue, and I want to remind :<font size="-1"><b></b></font><br>
<a class="moz-txt-link-freetext" href="http://www.thc.org/papers/vh_thc-ipv6_attack.pdf">http://www.thc.org/papers/vh_thc-ipv6_attack.pdf</a><br>
<br>
Gabi<br>
<br>
Pekka Savola wrote:
<blockquote cite="midPine.LNX.4.64.0704242007160.5598@netcore.fi"
type="cite">On Tue, 24 Apr 2007, Hank Nussbacher wrote:
<br>
<blockquote type="cite">On Tue, 24 Apr 2007, Gert Doering wrote:
<br>
How does one turn off IPv6 RH in IOS not via eACL?
<br>
In <a class="moz-txt-link-freetext" href="http://www.6net.org/events/workshop-2003/marin.pdf">http://www.6net.org/events/workshop-2003/marin.pdf</a> from 2003 slide
11 says it can't be turned off. Yet in slide 20 of Biondi/Ebalard it
says it can be deactivated in IOS.
<br>
<br>
So can someone point out the IOS command to deactivate it?
<br>
</blockquote>
<br>
If you're OK with filtering out all transit routing headers (affects
MIPv6), the ACL would be (like) 'deny ipv6 any any routing log'.
<br>
<br>
Later IOS versions reportedly also support matching specific RH type in
ACLs.
<br>
<br>
Not sure if this was the solution you were looking for.
<br>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Gabriella Paolini
_________________
GARR
National Research and Education Network in Italy
Via dei Tizii, 6 - 00185 Rome
direct:+39 06 4962 2507
mobile: +39 334 6533 252 (new number!)
<a class="moz-txt-link-freetext" href="skype:gabriella.paolini">skype:gabriella.paolini</a>
</pre>
</body>
</html>