On Tue, 15 Oct 2019, 17:13 Tomas Gibbs, <[email protected]> wrote:

> IIRC should be just fine to give it a public address aslong as you have
> firewalls in front to block traffic from outside to in.
>

Why give a device a public address if it doesn't need it to do its job?

You don't need a network firewall to protect a device from the Internet
that can't ever be reached from the Internet.




> Get Outlook for Android <https://aka.ms/ghei36>
>
> ------------------------------
> *From:* AusNOG <[email protected]> on behalf of Mark Smith <
> [email protected]>
> *Sent:* Tuesday, October 15, 2019 2:33:34 PM
> *To:* <[email protected]> <[email protected]>
> *Subject:* [AusNOG] Default IPv6 Local Only Addressing for Non-Internet
> Devices
>
> Hi,
>
> Quite closely related to my recent AusNOG "Getting IPv6 Private
> Addressing Right" presentation.
>
> I recently bought an IPv6 enabled Wifi printer. As it is attached to
> my single Wifi SSID it is configuring itself with IPv6 global
> addresses, even though I don't need it to be reachable from the
> Internet or able to reach the Internet. (It would be relatively hard
> to find from the Internet anyway with /64 prefix, and there is an IPv6
> firewall in front if it).
>
> I think it would be better for these types of "Non-Internet' devices
> not to configure themselves with global IPv6 addresses by default.
>
> "Default IPv6 Local Only Addressing for Non-Internet Devices"
> https://datatracker.ietf.org/doc/draft-smith-v6ops-local-only-addressing/
>
> Regards,
> Mark.
> _______________________________________________
> AusNOG mailing list
> [email protected]
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
_______________________________________________
AusNOG mailing list
[email protected]
http://lists.ausnog.net/mailman/listinfo/ausnog

Reply via email to