Blocking IPv6 broadcast
Mikael Abrahamsson
swmike at swm.pp.se
Thu Jul 23 10:15:56 UTC 2009
On Thu, 23 Jul 2009, Sharef Mustafa wrote:
> How can I block such broadcast from entering my network?
If you are not doing any L2 security for IPv6, you probably want to block
the IPv6 ethertype packets altogether.
Found a link here that might be useful:
<http://ardenpackeer.com/security/security-common-ethertypes-in-vlan-access-maps/>
I suggest anyone with L2 possibility between customers to implement
something like this to avoid rogue RAs.
--
Mikael Abrahamsson email: swmike at swm.pp.se
More information about the NANOG
mailing list