Re: Domain Centric Administration, RE: draft-ietf-v6ops-natpt-to-historic-00.txt

>> PS: in openbsd community if you do not commit frequently=20
>> enough you will be scolded for being a slacker.
>
>Which is part of where we need to get to.
>
>What I propose is a brand, similar to WiFi that tells a customer, =
>whether home or enterprise that a product:
>
>1) Either
>	Will install itself automatically and seamlessly within a network that
>is under domain centric administration.
>
>	Will do the above, unless the network is not already under domain
>centric admin in which case it will establish the necessary DNS and DHCP
>infrastructure to support one (and yes would be nice if this also
>extended to redundancy).
>
>2) Supports both IPv4 and IPv6 seamlessly.
>
>3) Has a built in device cert and is able to perform 802.1X
>authentication to the network hub
>
>4) In the case of a wireless device supports a network configuration =
>mechanism that does not involve a user touching a keyboard.
>
>
>In other words you have the current Internet and the 'it-just-works' =
>Internet. And the IJW-Internet happens to support everything you need =
>for IPv6.

	from what i've gathered from information sources, the device you want
	to buy is the latest version of Apple AirPort Extreme base station.

	i do not have one myself so please verify it by yourself.  i have
	used it at meetings (Jun Murai has almost every version of it) as well
	as while i have been war-driving in Tokyo.  nice (or bad) thing for the
	latter case was that there was no access control enabled for
	6to4-based IPv6 for the particular base station i've associated with:-P

	(1-2) are already covered as it implements NAT for IPv4 if you want.
	it can be configured as a pure L2 bridge between ethernet and 802.11,
	if you got enough IPv4 address to spare.
	in terms of IPv6, it has a button or something to turn on IPv6, and it
	even speak 6to4 if there is no ISP device/contact to terminate static
	IPv6-over-IPv4 tunnel.  of course you can bridge IPv6 as well.

	(4) is of course covered, almost every Apple product ships with GUI.

	i'm not too sure about (3) but i hope someone from Apple to comment.
	if necessary i'll meet people in Apple Japan tomorrow so i can ask.
	the device i've used were configured either with WEP or no auth.

	it runs *BSD variant, if you run namp on it you should be able to know
	which *BSD it is.


	so, Apple is not slacking and KAME/*BSD are not too.

	MacOS X is shipped with IPv6 enabled by default since 10.2 (or 10.3?)
	timeframe, and from WWDC2007 comment by Steve Jobs there are 22 million
	machines which runs 10.2 and beyond, so there are 22 million IPv6
	enabled machines.

	MacOS X is good, it is basically having Macintosh Aqua GUI on top of
	a BSD variant.  you will love it.

itojun

_______________________________________________
Ietf mailing list
Ietf@ietf.org
https://www1.ietf.org/mailman/listinfo/ietf