Re: 6MAN Adoption call on draft-gont-6man-deprecate-eui64-based-addresses-00

[David Farmer <[e-mail]>]

On 11/27/13, 11:04 , Brian Haberman wrote:
> Tom,
>
> On 11/27/13 11:56 AM, Tom Taylor wrote:
>
>> It is clear that
>> some network operators rely on EIU-64-based IPv6 addresses for
>> administrative purposes, as a carry-over from IPv4, and do not at
>> present wish to modify their procedures.
>>
>
> Could you elaborate on the above?  What procedures are they carrying
> over from IPv4 WRT EUI-64-based addresses?

I'm not sure if this is what Tom was referring too, but here is one example.

Early in our IPv6 adoption we preferred EUI-64 addresses because we 
already tracked ports, MAC and IPv4 address associations for our entire 
network, and when EUI-64 addresses were used we didn't need any 
additional tracking.  We knew were all MAC addresses were We knew we 
needed to add IPv6 address tracking to our management system regardless, 
but we could initially use EUI-64s without any additional tracking.

I'll also note, that if there was a way for a network operator to 
control the IID type used for SLAAC we could have generally deployed 
IPv6 one to two years sooner.  Without such a control we had to add full 
IPv6 tracking before we could generally deploy IPv6 to our network.  We 
accomplished this before world IPv6 day, but we could have had IPv6 
generally deployed at least one year and maybe even two years before 
world IPv6 day if we could have ensured use of EUI-64 with SLAAC.  At 
the time DHCPv6 wasn't a practical solution, primarily because of MAC 
OSX's lack of support for DHCPv6 at the time.

So, while I support Privacy Addresses in general they create their own 
set of challenges and can complicate IPv6 deployment in many 
environments.  Frequently, network security requirements need rethinking 
when you use IPv6 privacy addresses.  I'm not saying this is a bad 
thing, but IPv6 deployment is frequently hampered or slowed by the 
amount of rethinking necessary.

Thanks
-- 
================================================
David Farmer               Email: [e-mail]
Office of Information Technology
University of Minnesota
2218 University Ave SE     Phone: [phone]
Minneapolis, MN 55414-3029  Cell: 1-612-812-9952
================================================