Requirements for IPv6 Firewalls

Matthew Kaufman matthew at matthew.at
Fri Apr 18 03:56:54 UTC 2014


I think I got you to say "NAT"

Matthew Kaufman

(Sent from my iPhone)

> On Apr 17, 2014, at 7:05 PM, Timothy Morizot <tmorizot at gmail.com> wrote:
> 
> 
> On Apr 17, 2014 7:52 PM, "Matthew Kaufman" <matthew at matthew.at> wrote:
> >
> > While you're at it, the document can explain to admins who have been burned, often more than once, by the pain of re-numbering internal services at static addresses how IPv6 without NAT will magically solve this problem.
> 
> If you're worried about that issue, either get your own end user assignment(s) from ARIN or use ULA internally and employ NAT-PT (prefix translation) at the perimeter. That's not even a hard question.



More information about the NANOG mailing list