nanog mailing list archives
Re: best practices for management nets in IPv6
From: Cameron Byrne <cb.list6 () gmail com>
Date: Tue, 12 Jul 2011 16:29:33 -0700
On Jul 12, 2011 2:33 PM, "Tom Ammon" <tom.ammon () utah edu> wrote:
Hi All, We're pushing to get IPv6 deployed and working everywhere in our
operation, and I had some questions about best practices for a few things.
On your management nets (network device management nets) , what's the best
approach for addressing them? Do you use ULA? Or do you use global addresses and just depend on router ACLs to protect things? How close are we to having a central registry for unique local addresses, and will that really happen?
ACL are prone to typos and inconsistent deployment. If the security policy is that a give interface must not talk to the internet, ULA is a good choice as part of a multi-layer security strategy Cb
Tom
-----------------------------------------------------------------------------
Tom Ammon Network Engineer M: (801)674-9273 tom.ammon () utah edu Center for High Performance Computing University of Utah http://www.chpc.utah.edu
-----------------------------------------------------------------------------
Current thread:
- best practices for management nets in IPv6 Tom Ammon (Jul 12)
- Re: best practices for management nets in IPv6 Rubens Kuhl (Jul 12)
- Re: best practices for management nets in IPv6 Cameron Byrne (Jul 12)
- Re: best practices for management nets in IPv6 Joel Maslak (Jul 12)
- Re: best practices for management nets in IPv6 James Harr (Jul 13)
- RE: best practices for management nets in IPv6 Ryan Finnesey (Jul 17)
- Re: best practices for management nets in IPv6 FRLinux (Jul 18)
- Re: best practices for management nets in IPv6 Tim Franklin (Jul 18)
- Re: best practices for management nets in IPv6 Dave Hart (Jul 18)
- Re: best practices for management nets in IPv6 Doug Barton (Jul 18)
- RE: best practices for management nets in IPv6 Ryan Finnesey (Jul 18)
- RE: best practices for management nets in IPv6 Frank Bulk (Jul 18)
- RE: best practices for management nets in IPv6 Ryan Finnesey (Jul 18)
- Re: best practices for management nets in IPv6 James Harr (Jul 13)