Re: IPv6 on VoLTE

2018-11-08 Thread Tarko Tikan
hey, IMS 3GPP specification requires SIP integrity and confidentiality. You may see IPsec/IPsec security association on the device when it is communicating and/or registered with P-CSCF (uses SIP protocol). Correct. While IPsec might be an option, all popular terminals support SIP-TLS. Our

Re: IPv6 on VoLTE

2018-11-08 Thread Tarko Tikan
hey, This might be confusing VoLTE with VoWiFI. The latter will use IPSEC. Correct. What probably happened is that together with activating VoLTE, VoWIFI was also activated on the device. Makes sense as VoLTE users are typically moved to IMS environment. -- tarko

Re: CPE Residential IPv6 Security Poll

2016-09-19 Thread Tarko Tikan
hey, I guess none of the users know they are using IPv6 around 75-80% of the time internal, or 20-30% on their external traffic either:-) Indeed. I've been spreading knowledge about our deployment to our customers and most of them have been amazed that they had no idea :) But they have

Estonian IPv6 deployment report

2014-12-22 Thread Tarko Tikan
hey, Some time ago, many people noticed rapid IPv6 deployment growth in Estonia (from 0% to 5% in 4 weeks). We at 3249/Elion/Estonian Telecom were behind this, other operators don't have any serious IPv6 deployments at the moment. We rolled out v6 to everyone (both business and residential

Re: Some very nice broken IPv6 networks at Google and Akamai

2014-11-08 Thread Tarko Tikan
hey, I'm afraid I don't see the supporting evidence here. From my point of view, Google and Akamai IPv6 both work just fine. Concur. Both work just fine from my POV and I don't see lower than usual IPv6 traffic levels. -- tarko

Re: Some very nice IPv6 growth as measured by Google

2014-11-03 Thread Tarko Tikan
hey, Estonia has a VERY impressive growth approaching 5%: https://www.vyncke.org/ipv6status/plotpenetration.php?country=ee I have been driving an IPv6 project in Elion (now called Estonian Telekom) for some time now and this is the result. One of the goals I set for myself was exactly such

Re: Residential subscribers: numbered or unnumbered?

2014-03-26 Thread Tarko Tikan
hey, What were your reasons for selecting this option? - one prefix per customer, don't need to track separate wan and PD prefixes - hope that we can advertise default-route (pointing to virtual link-local address) with dhcpv6 in the future and can get rid of RA on the wan - certain

Re: RA DHCP problem...

2013-12-30 Thread Tarko Tikan
hey, If you have RA from more than one source on the cable you are much more likely to identify that after none too long debugging if all your IP configuration is by RA. You'll just have bignum users calling the helpdesk to complain that The Internet Is Broken (tm) or that they can't work.

Re: RA DHCP problem...

2013-12-29 Thread Tarko Tikan
hey, 4. there is no way for RAs to deploy different gateways to different hosts: all hosts on the network must be configured in the same way. +1 for this. We are currently using multiple default gw's (backed by multiple VRRP groups). This is something we can't port to ipv6 and it'll hurt as

Re: RA DHCP problem...

2013-12-28 Thread Tarko Tikan
hey, Why? What problem are you solving by changing the current behavior? We propose to decouple DHCP from RA, view them as two different autoconfiguration protocols. Today you can't deploy DHCP without RA and this forces you to support/secure two protocols that mostly overlap. Personally