It's a good start but there are many issues with it. I think you need to take some time to understand IPv6 before implementing. The book examples don't restrict RS/RA to link local, are too open on things like BGP and traceroute. Trio hardware also has payload-protocol available in addition to next-header for matching.
The IETF opsec-v6 draft is a useful resource to begin with https://datatracker.ietf.org/doc/draft-ietf-opsec-v6/ On Fri, 28 Jun 2019, 20:28 Aaron Gould, <[email protected]> wrote: > 2nd edition page 332 "IPv6 RE Protection Filter" > > -Aaron > > > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
