Estonian IPv6 deployment report

Phil Bedard bedard.phil at gmail.com
Sat Dec 27 16:41:55 UTC 2014


The access boxes and BNG typically have protection mechanisms in place.  Also even though customers are in a shared VLAN and IP subnet they aren't typically on the same broadcast domain.  In the case of active Ethernet you use things like private Vlans or other access controls.  

Phil

-----Original Message-----
From: "Anders Löwinger" <anders at abundo.se>
Sent: ‎12/‎27/‎2014 11:17 AM
To: "nanog at nanog.org" <nanog at nanog.org>
Subject: Re: Estonian IPv6 deployment report

On 2014-12-22 16:27, Tarko Tikan wrote:

> Our access network is mix of DSL/GPON/wimax/p2p-ETH and broadband service is
> deployed in shared service vlans. IPv6 traffic shares vlan with IPv4.

How do you protect customers from each other?

There are many nasty IPv6 attacks you can do when on a shared VLAN.

/Anders




More information about the NANOG mailing list