[ipv6hackers] "Stick to limited IPv6 deployments, businesses warned"
Jim Small
jim.small at cdw.com
Sat Sep 1 23:33:31 CEST 2012
> >>> My point is that the only way you can claim the IPv4 DHCP
> >>> situation is better than the situation with RAs today is _IF_ you
> >>> have widespread deployment and use of DHCP snooping.
> >>
> >> No. The DHCP situation is worse in v6 than in v4 because in v4, if
> >> you want to mitigate it, you can. In v6, if you want to mitigate
> >> it, you can't.
> >
> > Huh? What can't you mitigate about DHCP in IPv6 that you can
> > mitigate in IPv4?
>
> DHCP snooping -- we've been there, already.
>
FYI - DHCPv6 Guard is available in IOS 15.2(4)S on the 7600s today. Granted it's not pervasive, but it does exist and will come to more platforms.
--Jim
More information about the Ipv6hackers
mailing list