[ipv6hackers] "Stick to limited IPv6 deployments, businesses warned"

Jim Small jim.small at cdw.com
Sat Sep 1 23:33:31 CEST 2012


> >>> My point is that the only way you can claim the IPv4 DHCP
> >>> situation is better than the situation with RAs today is _IF_ you
> >>> have widespread deployment and use of DHCP snooping.
> >>
> >> No. The DHCP situation is worse in v6 than in v4 because in v4, if
> >> you want to mitigate it, you can. In v6, if you want to mitigate
> >> it, you can't.
> >
> > Huh? What can't you mitigate about DHCP in IPv6 that you can
> > mitigate in IPv4?
> 
> DHCP snooping -- we've been there, already.
> 

FYI - DHCPv6 Guard is available in IOS 15.2(4)S on the 7600s today.  Granted it's not pervasive, but it does exist and will come to more platforms.

--Jim






More information about the Ipv6hackers mailing list