Dear all,
I discussed one topic off line with Eric, regarding
http://tools.ietf.org/html/draft-ietf-opsec-lla-only-01
For the sake of openness, here it is again on the list.
One on hand, the draft mentions:
Lower configuration complexity: LLAs require no specific
configuration, thereby lowering the complexity and size of router
configurations. This also reduces the likelihood of configuration
mistakes.
On the other hand, the draft mentions:
These link-local addresses SHOULD be hard-coded to prevent the change
of EUI-64 addresses when changing of MAC address (such as after
changing a network interface card).
So the question is: who is going to configure this? If the NMS, there is
not much of a gain in term of lower configuration complexity.
We discussed the possibility of a global config on the router, for which
the link-local addresses for that router would be generated from the UUID.
Regards, Benoit
_______________________________________________
OPSEC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsec
