On Saturday, October 08, 2011 02:54:40 AM Paul Stewart wrote: > Thank you Amos, Robert, Jared, and Scott for the on-list > and off-list replies.
> Got it up and running – appreciate the responses… You also want to look out for rogue RA's on the network, typical of conference or enterprise setups where v6 is involved. Common cases have been Windows Vista hosts making themselves routers and spewing 6-to-4 on the network. Suffice it to say, DRP implementation in routers (sort of meant to thwart this) on the subnet is pretty useless. As you likely know, Rogue RA support is lacking today (although specs. are already out), as is DHCPv6 Snooping. Our only solution was to filter at the MAC layer. Hectic, but luckily, we used few switches and were able to deploy filters quite rapidly. Mark.
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
