Estonian IPv6 deployment report
Phil Bedard
bedard.phil at gmail.com
Sat Dec 27 16:41:55 UTC 2014
The access boxes and BNG typically have protection mechanisms in place. Also even though customers are in a shared VLAN and IP subnet they aren't typically on the same broadcast domain. In the case of active Ethernet you use things like private Vlans or other access controls.
Phil
-----Original Message-----
From: "Anders Löwinger" <anders at abundo.se>
Sent: 12/27/2014 11:17 AM
To: "nanog at nanog.org" <nanog at nanog.org>
Subject: Re: Estonian IPv6 deployment report
On 2014-12-22 16:27, Tarko Tikan wrote:
> Our access network is mix of DSL/GPON/wimax/p2p-ETH and broadband service is
> deployed in shared service vlans. IPv6 traffic shares vlan with IPv4.
How do you protect customers from each other?
There are many nasty IPv6 attacks you can do when on a shared VLAN.
/Anders
More information about the NANOG
mailing list