nanog mailing list archives

Re: Requirements for IPv6 Firewalls


From: Matthew Kaufman <matthew () matthew at>
Date: Thu, 17 Apr 2014 20:56:54 -0700

I think I got you to say "NAT"

Matthew Kaufman

(Sent from my iPhone)

On Apr 17, 2014, at 7:05 PM, Timothy Morizot <tmorizot () gmail com> wrote:


On Apr 17, 2014 7:52 PM, "Matthew Kaufman" <matthew () matthew at> wrote:

While you're at it, the document can explain to admins who have been burned, often more than once, by the pain of 
re-numbering internal services at static addresses how IPv6 without NAT will magically solve this problem.

If you're worried about that issue, either get your own end user assignment(s) from ARIN or use ULA internally and 
employ NAT-PT (prefix translation) at the perimeter. That's not even a hard question.


Current thread: