quietly....
Owen DeLong
owen at delong.com
Wed Feb 2 15:04:13 UTC 2011
On Feb 2, 2011, at 6:43 AM, Jack Bates wrote:
>
>
> On 2/2/2011 8:22 AM, Tony Finch wrote:
>> Counterexample: rogue RAs from Windows boxes running 6to4 or Teredo and
>> Internet Connection Sharing. This is a lot harder to fix than a
>> misconfigured DHCP server.
>
> CounterCounterexample: rogue DHCPv6 servers from windows boxes or improperly connected CPEs.
>
> Both DHCP(4 or 6) and RA require careful filtering to keep rogues from jacking things up. Though M$ has a nice deployment for authorizing DHCP4 servers in corporate environments.
>
It's a lot easier to find and eliminate a rogue DHCP server than a rogue RA.
Owen
More information about the NANOG
mailing list