Re: address selection and DHCPv6

To: "Durand, Alain" <Alain_Durand at cable.comcast.com>
Subject: Re: address selection and DHCPv6
From: Eliot Lear <lear at cisco.com>
Date: Fri, 27 Oct 2006 10:48:48 +0200
Authentication-results: sj-dkim-3.cisco.com; header.From=lear@cisco.com; dkim=pass ( sig from cisco.com verified; );
Cc: Vlad Yasevich <vladislav.yasevich at hp.com>, ipv6 at ietf.org
Dkim-signature: a=rsa-sha1; q=dns; l=415; t=1161938930; x=1162802930; c=relaxed/simple; s=sjdkim3002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=lear@cisco.com; z=From:Eliot=20Lear=20<lear@cisco.com> |Subject:Re=3A=20address=20selection=20and=20DHCPv6; X=v=3Dcisco.com=3B=20h=3DTBW0p3AeDVf3M0uwc8VDnrCT5KA=3D; b=HPXbxWG3ral4EfwUuW7l9J/m3VDHtdpX8eb/ZHcgV2J3eOAeY/HqfXpT9LiIbYLVv/1YYGXf UgPMpLWnrVvPI1iSEu0AeRq9dH0D7IVBstQsMkxcLb26ePWvw5cRk1mA;
In-reply-to: <EF2F0EC839870F43A6637360BC12ABD44CE532@PACDCEXCMB05.cable.comcast.com>
List-help: <mailto:ipv6-request@ietf.org?subject=help>
List-id: "IP Version 6 Working Group \(ipv6\)" <ipv6.ietf.org>
List-post: <mailto:ipv6@ietf.org>
List-subscribe: <https://www1.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
List-unsubscribe: <https://www1.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
References: <EF2F0EC839870F43A6637360BC12ABD44CE532@PACDCEXCMB05.cable.comcast.com>
User-agent: Thunderbird 1.5.0.7 (Macintosh/20060909)

Alain,

Ipv6 address will be much more stable than EUI64. But, more importantly, they will be centrally assigned, ie can be propagated to places that maitain ACLs.

Just because one receives a DHCP-assigned address doesn't mean one will use it, and so such "security" is fraught with risks. I'm not say it's impossible, but great caution is needed when going in this direction.

Eliot

--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6 at ietf.org
Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Follow-Ups:
- Re: address selection and DHCPv6
  - From: James Carlson

References:
- RE: address selection and DHCPv6
  - From: Durand, Alain

Prev by Date: Re: address selection and DHCPv6
Next by Date: Re: address selection and DHCPv6
Previous by thread: Re: address selection and DHCPv6
Next by thread: Re: address selection and DHCPv6
Index(es):
- Date
- Thread

Re: address selection and DHCPv6

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.