now i see rogue RAs which advertise fec0:0:0:4::/64 and 202:8281:1768:4::/64. my guess is that this is from the same guy. we need L2 switch vendors to implement ways to prevent rogue RA/DHCPv6 sources, just like ways to avoiding rogue DHCPv4 servers/relay agents. itojun