[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: ping-pong phenomenon with p2p links & /127 prefixes



[Changing slightly to a different angle]

I agree with most people that pingable interfaces on all core routers are very useful/interesting to say the least (even if I do not operate a SP network, I get the idea :-)).

From the security perspective, having hidden/not reachable router interfaces is also very useful :) 

There are a couple of ways of achieving this: from an infrastructure ACL deployed at the edge (easier to do in IPv6 thanks to new addressing plan), to using ULA on the interfaces (+ a global as ICMP source), to using only LLA (and a few other techniques).

Which technique is used nowadays in IPv6 network?  I guess that infra ACL are used (parity with IPv4) or am I wrong?

Regards

-éric