General Discussion
  >> General Broadband Chatter


Register (or login) on our website and you will not see this ad.


Pages in this thread: 1 | 2 | [3] | (show all)   Print Thread
Standard User RobertoS
(sensei) Wed 26-Jan-11 21:16:54
Print Post

Re: IP address security


[re: Anonymous] [link to this post]
 
In reply to a post by Anonymous:
No it wasnot me,you were right when you said
It's just that the last response makes you sound as if you're 'all techie' which doesn't go hand in hand with the original post tongue
laugh

James
It's best to register if you intend to post James smile, or even just to read. It stops all all the in-thread adverts for a start, lets you edit yoyr posts for up to 12 hours, and saves any confusion.

Threads with multiple Anon posts are a nightmare, especially when the sucon one starts with "I'm having thje same problem ...".

Free, and you do not get spammed smile!

My broadband basic info/help site - www.robertos.me.uk
My domains,website and mail hosting - Tsohost. Internet connection - O2 Standard.
Standard User RobertoS
(sensei) Wed 26-Jan-11 21:18:04
Print Post

Re: IP address security


[re: b4dger] [link to this post]
 
OOps! Sorry b4dger. I didn't get as far as your post. Threaded mode plus vino.

My broadband basic info/help site - www.robertos.me.uk
My domains,website and mail hosting - Tsohost. Internet connection - O2 Standard.
Standard User Renfrew
(regular) Wed 26-Jan-11 22:04:50
Print Post

Re: IP address security


[re: Anonymous] [link to this post]
 
In reply to a post by Anonymous:
> Perhaps, but doesn't IPv6 also encode the hardware MAC for the NIC into
> each machine's assigned IP address (in the second /64)?

That's one way of doing it ( stateless auto-configuration ) but you can also assign arbitrary addresses by DHCPv6 or just set them manually to whatever clever hex mnemonic you like.

Well, yes, except that some commentators would have it that DHCPv6 was never fully specified and is proving to be a nightmare to set up a working implementation over PPP. See Adrian Kennard's (AAISP) blog:- DHCP over PPP

I claim no expertise or special knowledge for myself and, like many others I suspect, I am only trying to get up-to-speed in readiness for the wider use of IPv6. It seems to become complicated when delving into IPv6CP and associated factors, if only I understood it frown. See:- IPv6CP vs DHCPv6

--
Dave N

Every day, ...... is another day


Register (or login) on our website and you will not see this ad.

Anonymous
(Unregistered)Thu 27-Jan-11 11:25:45
Print Post

Re: IP address security


[re: Renfrew] [link to this post]
 
I highly respect AK's skills, but he is doing something very different to LAN DHCPv6 deployments ( which work very well, I can attest ). I don't normally deal with stuff at the PPP level so I cannot comment on the validity of his approach as an ISP.

Regardless of why, setting the /48 prefix via DHCPv6 over PPP still allows the hosts on the client network set their actual addresses in any way they like.

For example, router advertisements can forward the prefix to the hosts for stateless auto-config ( using MAC ) or each host could set its address based on a hash of timestamp with hostname and change this every few seconds.

Such is the address space of a delegated /48 that every IP packet could have a unique originating address, if that's what you want.

Or you could name each host using only hex characters and just bung the hostname into the address. And you can have vanity addresses such as 2001:8a1:cc21::feed:f1d0.

IPv6 addressing is very flexible compared to the days of old.

--
v6 guy
Standard User Renfrew
(regular) Thu 27-Jan-11 11:43:32
Print Post

Re: IP address security


[re: Anonymous] [link to this post]
 
Hmmm, thanks. I need to do a lot more reading yet!

--
Dave N

Every day, ...... is another day
Standard User deleted
(deleted) Sat 29-Jan-11 10:41:31
Print Post

Re: IP address security


[re: billford] [link to this post]
 
And as it is normal for devices to have 'global' IPv6 addresses (as opposed to NATed private addresses on IPv4). it is possible to establish an IPSec tunnel between any 2 (co-operating) IPv6 systems.
Pages in this thread: 1 | 2 | [3] | (show all)   Print Thread

Jump to