<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>Hello ipv6-ops,<br /><br />what are your experiences with dynamic IPv6 prefixes? Here in Germany, several ISPs only offer dynamic /56 prefixes that change after a router reboot. Of course, for "normal" end-users this is not a problem. But for companies having several remote offices behind such ISP lines, this is a problem. (And of course, for me as a network guy, too. ;))<br />I encounter several problems with this type of dynamic prefixes and summarized them here:<br /><a href="http://blog.webernetz.net/2015/10/27/ipv6-dyn-prefix-problems/">http://blog.webernetz.net/2015/10/27/ipv6-dyn-prefix-problems/</a></p>
<p>1) Many DNS changes for services behind the dyn prefix (not all devices are able to update DNS records)<br />2) Security policies with DynDNS ranges (how to allow a dyn IPv6-range in other firewall policies?)<br />3) Routing inside IPv6 VPN tunnels (solved with OSPFv3, but maybe not optimal?)<br /><br />I am highly interested in others experience about dynamic prefixes. How do you solve these problems, e.g., when a company has several remote offices with dynamic prefixes?<br /><br />Thanks,<br /><br />Johannes</p>
<div>-- <br />
<p><span style="font-family: courier new,courier,monospace;">Johannes Weber</span><br /><span style="font-family: courier new,courier,monospace;"> mail: <a href="mailto:johannes@webernetz.net" rel="noreferrer">johannes@webernetz.net</a></span><br /><span style="font-family: courier new,courier,monospace;"> mobile: +49 174 1880211</span><br /> <br /><span style="font-family: courier new,courier,monospace;"> blog: <a href="http://blog.webernetz.net" rel="noreferrer">http://blog.webernetz.net</a></span><br /><span style="font-family: courier new,courier,monospace;"> twitter: <a href="https://twitter.com/webernetz" rel="noreferrer">https://twitter.com/webernetz</a></span></p>
</div>
<p> </p>
</body></html>