RE: Estonian IPv6 deployment report

[Phil Bedard <bedard.phil () gmail com>]

The access boxes and BNG typically have protection mechanisms in place.  Also even though customers are in a shared 
VLAN and IP subnet they aren't typically on the same broadcast domain.  In the case of active Ethernet you use things 
like private Vlans or other access controls.  

Phil

-----Original Message-----
From: "Anders Löwinger" <anders () abundo se>
Sent: ‎12/‎27/‎2014 11:17 AM
To: "nanog () nanog org" <nanog () nanog org>
Subject: Re: Estonian IPv6 deployment report

On 2014-12-22 16:27, Tarko Tikan wrote:

> Our access network is mix of DSL/GPON/wimax/p2p-ETH and broadband service is
> deployed in shared service vlans. IPv6 traffic shares vlan with IPv4.

How do you protect customers from each other?

There are many nasty IPv6 attacks you can do when on a shared VLAN.

/Anders