JUNOS forwards IPv6 link-local packets
Jack Bates
jbates at brightok.net
Fri Apr 27 14:39:47 UTC 2012
On 4/27/2012 9:26 AM, Chris Adams wrote:
> I don't think that will work, because there's an automatic direct
> route for fe80::/64 to all interfaces with family inet6 configured.
> The only way I see around it is to apply a firewall filter to all IPv6
> interfaces that blocks anything with a source in fe80::/64 and
> destination _not_ in fe80::/64.
fe80::/65 discard
fe80:0:0:0:8000::/65 discard
More specifics rule out over connected any day.
Jack
More information about the NANOG
mailing list