Re: ipv6 newbie question

[Owen DeLong <owen () delong com>]

There are tradeoffs in both directions.

Personally I think administrative simplicity wins over security through obscurity, so I recommend each organization 
pick a random pair of static addresses and use those two addresses for all of their point to point links.

e.g. If your prefix for a given link is 2001:db8:xxxx:yyyy::/64, and you randomly choose the suffixes 
dead:beef:cafe:babe and dead:beef:cafe:feed as your end-point addresses, then the links would be numbered 
2001:db8:xxxx:yyyy:dead:beef:cafe:{babe,feed}.

YMMV and I don't recommend using my examples in practice.

Owen


> On Jan 29, 2014, at 12:35 PM, Philip Lavine <source_route () yahoo com> wrote:
>
>  
>
>   
> Is it best practice to have the internet facing BGP router's peering ip (or for that matter any key gateway or 
> security appliance) use a statically configured address or use EUI-64 auto config?
>
> I have seen comments on both sides and am leaning to EUI-64 (except for the VIP's like the ASA's failover ip )
>
> -Philip