nanog mailing list archives

Re: Blocking IPv6 broadcast


From: Mikael Abrahamsson <swmike () swm pp se>
Date: Thu, 23 Jul 2009 12:15:56 +0200 (CEST)

On Thu, 23 Jul 2009, Sharef Mustafa wrote:

How can I block such broadcast from entering my network?

If you are not doing any L2 security for IPv6, you probably want to block the IPv6 ethertype packets altogether.

Found a link here that might be useful:

<http://ardenpackeer.com/security/security-common-ethertypes-in-vlan-access-maps/>

I suggest anyone with L2 possibility between customers to implement something like this to avoid rogue RAs.

--
Mikael Abrahamsson    email: swmike () swm pp se


Current thread: