Re: IPv6 first hop security on a budget?

2017-11-10 Thread joel jaeggli
On 11/11/17 09:14, Fernando Gont wrote: > On 05/05/2017 08:27 PM, Joel Whitehouse wrote: >> What's a good budget option for switching a small lab or office ipv6 >> with RA Guard, DHCP6 snooping, and ICMP6 snooping? >> > > If you do deploy this, please take a look at the issues discussed in >

Re: IPv6 first hop security on a budget?

2017-11-10 Thread Saku Ytti
Not suggesting there is no use case of RA Guard, DHCP6 Snooping, ICMP6 snooping, as I deployed IPv4 equivalent pretty much the day they were available on 3560. You might want to consider de-perimeterisation. Do you offer way to connect to intranet from Internet? If so, why not use same method in

Re: IPv6 first hop security on a budget?

2017-11-10 Thread Fernando Gont
On 05/05/2017 08:27 PM, Joel Whitehouse wrote: > What's a good budget option for switching a small lab or office ipv6 > with RA Guard, DHCP6 snooping, and ICMP6 snooping? > If you do deploy this, please take a look at the issues discussed in RFC7113. Similar stuff is likely to apply to DHCPv6

95 Christopher Colombus

2017-11-10 Thread chris
Hello, Just wondering if anyone on the list is an existing tenant at 95 Christopher Colombus Jersey City NJ which has equipment already and/or a few RU of free rack space. We have a small project so renting a full cage etc isnt really practical. If you are in the building (real equipment not

Weekly Routing Table Report

2017-11-10 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG, CaribNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are

Weekend Reading - New Undersea Cable Systems

2017-11-10 Thread Rod Beck
Marea provides Trans-Atlantic connectivity via Virginia to Spain. Much needed diversity given the dominance of NYC-London. Facebook and Microsoft were principal backers.