Estonian IPv6 deployment report

Phil Bedard bedard.phil at
Sat Dec 27 16:41:55 UTC 2014

The access boxes and BNG typically have protection mechanisms in place.  Also even though customers are in a shared VLAN and IP subnet they aren't typically on the same broadcast domain.  In the case of active Ethernet you use things like private Vlans or other access controls.  


-----Original Message-----
From: "Anders Löwinger" <anders at>
Sent: ‎12/‎27/‎2014 11:17 AM
To: "nanog at" <nanog at>
Subject: Re: Estonian IPv6 deployment report

On 2014-12-22 16:27, Tarko Tikan wrote:

> Our access network is mix of DSL/GPON/wimax/p2p-ETH and broadband service is
> deployed in shared service vlans. IPv6 traffic shares vlan with IPv4.

How do you protect customers from each other?

There are many nasty IPv6 attacks you can do when on a shared VLAN.


More information about the NANOG mailing list