On Fri, 25 Jul 2014, Scott Voll wrote:
How do you allow ICMPv6 into your network with a cisco ASA?
Mane sure running a fairly recent version of ASA code / ASDM.
There is be a protocol type for icmp6. Also, keep in mind that some
ICMPv6 needs to be able to get in from anywhere (for path MTU discovery,
etc), some only needs to be allowed in from the link-local range, and some
can (and should) be denied.
ICMPv6 is a very different animal from ICMP in the IPv4 world. I'd
definitely recommend reading up on it before deploying a security policy.
While many sites treat IPv4 ICMP as an afterthought or something evil that
should be blocked at all costs, ICMPv6 is much more central to the proper
operation of an IPv6 network.
jms
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
