[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: draft-wbeebee-ipv6-cpe-router-04 comments



>This sound like a huge security problem, how are those implications 
>handled? Wouldn't the L2 device in the CO need to be able to inspect
all 
>these messages and drop ones which are not assigned to that specific 
>customer by the ISP?

>In the scenarios I have seen before mechanisms such as forced
forwarding 
>and/or mac rewrite/DHCP snooping based ACLs been used in the CO L2
device 
>to handle this, what are the IPv6 equivalents in this scenario?

Thank you, Mikael.  I just sent email that I too consider such behavior
to be a security hole and gave the rationale for it.

Hemant