The access boxes and BNG typically have protection mechanisms in place. Also even though customers are in a shared VLAN and IP subnet they aren't typically on the same broadcast domain. In the case of active Ethernet you use things like private Vlans or other access controls.
Phil -----Original Message----- From: "Anders Löwinger" <[email protected]> Sent: 12/27/2014 11:17 AM To: "[email protected]" <[email protected]> Subject: Re: Estonian IPv6 deployment report On 2014-12-22 16:27, Tarko Tikan wrote: > Our access network is mix of DSL/GPON/wimax/p2p-ETH and broadband service is > deployed in shared service vlans. IPv6 traffic shares vlan with IPv4. How do you protect customers from each other? There are many nasty IPv6 attacks you can do when on a shared VLAN. /Anders
