Re: draft-gont-6man-managing-privacy-extensions-00.txt

[Doug Barton <[e-mail]>]

On 03/09/2011 06:57, Mikael Abrahamsson wrote:
> If you want to know the mac address of the computer who used an IP
> address at a certain time, then you need to tell the host to only use
> EUI64 based address and nothing else, you don't tell it to disable
> privacy extensions. Just because privacy extensions is the only address
> widely seen today as being non-EUI64, doesn't mean that if you disable
> privacy, you get only single EUI64.

Right. When I was at Yahoo! we had a db of mac addresses of authorized 
hosts, and used that to drive configuration of the switches, dhcp, dns, 
etc. that way we could be sure that only authorized hosts had access to 
the network. If you don't manage access at the switch level, you can't 
guarantee what the client is going to do, regardless of what flags are 
sent in SLAAC.


Doug

-- 

	Nothin' ever doesn't change, but nothin' changes much.
			-- OK Go

	Breadth of IT experience, and depth of knowledge in the DNS.
	Yours for the right price.  :)  http://SupersetSolutions.com/