Blocking IPv6 broadcast

Mikael Abrahamsson swmike at swm.pp.se
Thu Jul 23 10:15:56 UTC 2009


On Thu, 23 Jul 2009, Sharef Mustafa wrote:

> How can I block such broadcast from entering my network?

If you are not doing any L2 security for IPv6, you probably want to block 
the IPv6 ethertype packets altogether.

Found a link here that might be useful:

<http://ardenpackeer.com/security/security-common-ethertypes-in-vlan-access-maps/>

I suggest anyone with L2 possibility between customers to implement 
something like this to avoid rogue RAs.

-- 
Mikael Abrahamsson    email: swmike at swm.pp.se




More information about the NANOG mailing list