IPv6 first hop security on a budget?

Fernando Gont fgont at si6networks.com
Sat Nov 11 01:14:28 UTC 2017

On 05/05/2017 08:27 PM, Joel Whitehouse wrote:
> What's a good budget option for switching a small lab or office ipv6
> with RA Guard, DHCP6 snooping, and ICMP6 snooping?

If you do deploy this, please take a look at the issues discussed in
RFC7113. Similar stuff is likely to apply to DHCPv6 snooping et al.


Best regards,
Fernando Gont
SI6 Networks
e-mail: fgont at si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

More information about the NANOG mailing list