[ipv6hackers] IOS NDP Inspection and First Hop Security Enhancements

[Marc Heuse]

same mechanism so same problems :-)
(and is implemented also in the thc-ipv6 tools for NDP, e.g. parasite6
and fake_advertise6 etc.)

Am 28.01.2012 22:04, schrieb Jim Small:
> Hello,
> 
> I know Fernando has reviewed IOS RA Guard and shown its deficiencies.  Has anyone reviewed the newest IOS IPv6 First Hop Security Enhancements such as NDP Inspection to see how effective the features are?
> 
> --Jim
> 
> _______________________________________________
> Ipv6hackers mailing list
> Ipv6hackers at lists.si6networks.com
> http://lists.si6networks.com/listinfo/ipv6hackers
> 

--
Marc Heuse
Mobil: +49 177 9611560
Fax: +49 30 37309726
www.mh-sec.de

Marc Heuse - IT-Security Consulting
Winsstr. 68
10405 Berlin

Ust.-Ident.-Nr.: DE244222388
PGP: FEDD 5B50 C087 F8DF 5CB9  876F 7FDD E533 BF4F 891A