nanog mailing list archives

Re: NIST IPv6 document


From: Jack Bates <jbates () brightok net>
Date: Thu, 06 Jan 2011 09:51:27 -0600

On 1/6/2011 9:37 AM, Marcel Plug wrote:
Perhaps we're reaching the point where we can say "We don't need an ND
table for a /64 network".  If the ethernet MAC is embedded in the IPv6
address, we don't need to discover it because we already know it.  If
the IPv6 address has been manually configured on a host, perhaps that
host should now accept traffic directed to the MAC that the lower 64
bits of the IPv6 address would translate to.

Perhaps this idea has been discussed somewhere and discarded for its
flaws, but if not, perhaps it should be :-).


The table itself is fine. I fully support it. The method for generating such a table within a router (separate from standard hosts who only generate tables for who they need to talk to, and unless you allowed forged packets in from remote, shouldn't have an issue) is what is in questions.

See my other posts. There have been many implementations, mostly for security reasons, but also helping with this problem by implementing a "router MUST NOT send unsolicited arp requests". It's important that routers learn their table in another fashion.


Jack


Current thread: