/27 the new /24

Sander Steffann sander at steffann.nl
Sun Oct 4 15:58:26 UTC 2015


Hi,

> Op 4 okt. 2015, om 16:52 heeft Mel Beckman <mel at beckman.org> het volgende geschreven:
> 
> If it doesn't support IPSec, it's not really IPv6. Just as if it failed to support any other mandatory IPv6 specification, such as RA. 

I think you're still looking at an old version of the IPv6 Node Requirements. Check https://tools.ietf.org/html/rfc6434#section-11, specifically this bit:

"""
Previously, IPv6 mandated implementation of IPsec and recommended the key management approach of IKE.  This document updates that recommendation by making support of the IPsec Architecture a SHOULD for all IPv6 nodes.
"""

This was published in December 2011.

Cheers,
Sander




More information about the NANOG mailing list