RE: FW: I-D ACTION:draft-ietf-v6ops-ent-scenarios-03.txt

["Bound, Jim" <jim.bound@hp.com>]

Hi Margaret,

Yes we can do this as data is available.  As Chair of NAv6TF and Moonv6
project is under NAv6TF direction I can request such data.  Most of the
folks doing this will be in San Diego too.

On the IPv6 security issue that is totally correct.  Note one other big
time port is the IDS software for IPv4 simply to be ported to IPv6, and
most of this requires certain levels of intel clearance even to
understand the requirements in both government and private sector, so
complex to parse the requirements for implementation.

/jim 

> -----Original Message-----
> From: Margaret Wasserman [mailto:margaret@thingmagic.com] 
> Sent: Friday, July 02, 2004 10:29 AM
> To: Bound, Jim; Pekka Savola
> Cc: Soininen Jonne (Nokia-NET/Helsinki); v6ops@ops.ietf.org
> Subject: RE: FW: I-D ACTION:draft-ietf-v6ops-ent-scenarios-03.txt
> 
> 
> Hi Jim,
> 
> At 1:38 AM -0400 7/2/04, Bound, Jim wrote:
> >  So I want to clarify Margaret's
> >statement that it is not resistance and IPv6 is mandated and will 
> >happen, but that more testing is required.  That testing is going on 
> >now and one example is Moonv6 (there are others) www.mooonv6.org
> 
> Good clarification.
> 
> "Resistance" was a poor word choice, "caution" might have 
> been better, and I agree that caution is appropriate.
> 
> My thinking is that the v6ops group should be informed by 
> early operational experience with IPv6-only networks (like 
> Moonv6) and that during the analysis phase for the 
> secure/defense networks scenario we should consider if any 
> IETF protocol or BCP-type work is needed to resolve 
> technical/protocol issues found  in that testing (if any).
> 
> The biggest issue with secure IPv6 deployment (as I 
> understand it) is not a lack of appropriate standards, but a 
> lack of available, supported, commercial products for 
> information assurance that include good IPv6 integration 
> (things like firewalls and intrusion detection systems).  So, 
> some of the issues may not be addressable by the IETF at all. 
>  Have things been getting better in this area?
> 
> Margaret
> 
> 
> 
>