Re: network controls are neccessary

[Erik Nordmark <Erik.Nordmark@sun.com>]

> For a larger enterprise network, this becomes a showstopper.  If the host
> picks a destination address on the least preferred network, the network
> infrastructure has no way to redirect him.
> 
> An alternative is to push policy to the hosts that's a bit smarter than
> longest-bit-match, except in a large enterprise, programming policy to
> 100,000+ hosts is extremely hard to do unless it's standardized and
> centralized in the network.  Now, I have no problems with the host
> learning policy (through RA, or through a DNS mechanism, or whatever) but
> it needs to be a required, standard part of IPv6.

Thanks Craig, this was the type of info I was looking for.

Do you have ideas on how complex the policies typically are?
For instance, would it make sense to push all of the rules into the hosts
or is the set of rules so large that a host-based solution would need to
cache subsets of the rules on demand?

  Erik