On 14 Jun 2011, at 02:23, Fernando Gont wrote: >> Are there plans to introduce dhcpv6-guard? > > This is something that vendors should answer. As long as there are > implementations that may try DHCPv6 even if no RA is received, DHCPv6 > should be implemented/deployed along RA-Guard, or else attackers will > switch to teh DHCPv6 vector, and RA-Guard will be circumvented this way.
I am aware of it being on the roadmap for one significant router vendor. But that model is familiar from IPv4. Tim -------------------------------------------------------------------- IETF IPv6 working group mailing list [email protected] Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------
