Re: IPv6 first hop security on a budget?

[Fernando Gont <fgont () si6networks com>]

On 05/05/2017 08:27 PM, Joel Whitehouse wrote:
> What's a good budget option for switching a small lab or office ipv6
> with RA Guard, DHCP6 snooping, and ICMP6 snooping?

If you do deploy this, please take a look at the issues discussed in
RFC7113. Similar stuff is likely to apply to DHCPv6 snooping et al.

Thanks!

Best regards,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont () si6networks com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492