nanog mailing list archives
Re: JUNOS forwards IPv6 link-local packets
From: Jack Bates <jbates () brightok net>
Date: Fri, 27 Apr 2012 09:39:47 -0500
On 4/27/2012 9:26 AM, Chris Adams wrote:
I don't think that will work, because there's an automatic direct route for fe80::/64 to all interfaces with family inet6 configured. The only way I see around it is to apply a firewall filter to all IPv6 interfaces that blocks anything with a source in fe80::/64 and destination _not_ in fe80::/64.
fe80::/65 discard fe80:0:0:0:8000::/65 discard More specifics rule out over connected any day. Jack
Current thread:
- JUNOS forwards IPv6 link-local packets Chris Adams (Apr 27)
- Re: JUNOS forwards IPv6 link-local packets Jack Bates (Apr 27)
- Re: JUNOS forwards IPv6 link-local packets Chris Adams (Apr 27)
- Re: JUNOS forwards IPv6 link-local packets Jack Bates (Apr 27)
- Re: JUNOS forwards IPv6 link-local packets Chris Adams (Apr 27)
- Re: JUNOS forwards IPv6 link-local packets Jack Bates (Apr 27)
- Re: JUNOS forwards IPv6 link-local packets Christopher Morrow (Apr 27)
- Re: JUNOS forwards IPv6 link-local packets Owen DeLong (Apr 28)
- Re: JUNOS forwards IPv6 link-local packets Chris Adams (Apr 27)
- Re: JUNOS forwards IPv6 link-local packets Jack Bates (Apr 27)
- Re: JUNOS forwards IPv6 link-local packets Justin M. Streiner (Apr 30)
- Re: JUNOS forwards IPv6 link-local packets Phil Bedard (Apr 30)