Re: DAD question

Brian E Carpenter <brian.e.carpenter@gmail.com> Wed, 15 August 2012 07:05 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8560F21F85F7 for <ipv6@ietfa.amsl.com>; Wed, 15 Aug 2012 00:05:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.504
X-Spam-Level:
X-Spam-Status: No, score=-101.504 tagged_above=-999 required=5 tests=[AWL=0.187, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nOcME4nhzlK2 for <ipv6@ietfa.amsl.com>; Wed, 15 Aug 2012 00:05:57 -0700 (PDT)
Received: from mail-we0-f172.google.com (mail-we0-f172.google.com [74.125.82.172]) by ietfa.amsl.com (Postfix) with ESMTP id D75A721F85F4 for <ipv6@ietf.org>; Wed, 15 Aug 2012 00:05:56 -0700 (PDT)
Received: by weyu54 with SMTP id u54so929442wey.31 for <ipv6@ietf.org>; Wed, 15 Aug 2012 00:05:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=Ud1U8MZcozFVR1St+z4yzL2HED8hBgHZaKEAQoTmwFY=; b=DuOz3Ggj2vHBuJlM7Pj1mueG/3i7b4ORz+CEGdfkAODB3JswjGzqgjMynuK9t1Up+Q Y90rcbTq/oIjcliFTU0KlggFP3gqLOJUCoGnqsPaVMR9GBINEyPXrzB+GIxhJnlZcXTf H3rzaf3DCAjV1VqY8SI9Oxd0O5BIqTVVtezgE1r5AK4K+w5vpJZ1Cib2+aPAk3uYLSxj ecfSmDMfmguG2WhCzX3MiPju1og736GLTMzMZpfohBIan0lYjcIVk23lltfJiAdYGsGD 9IireDc1p0oxp0AorM99WQ00pnc7rEYvc8fn9icd0AjXEUNeOSsOQ2Rm+3Jsle1KlL8n CNdg==
Received: by 10.180.107.103 with SMTP id hb7mr34697085wib.3.1345014356066; Wed, 15 Aug 2012 00:05:56 -0700 (PDT)
Received: from [192.168.1.65] (host-2-102-218-63.as13285.net. [2.102.218.63]) by mx.google.com with ESMTPS id el6sm26857441wib.8.2012.08.15.00.05.54 (version=SSLv3 cipher=OTHER); Wed, 15 Aug 2012 00:05:54 -0700 (PDT)
Message-ID: <502B4A57.7080701@gmail.com>
Date: Wed, 15 Aug 2012 08:05:59 +0100
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: Simon Perreault <simon.perreault@viagenie.ca>
Subject: Re: DAD question
References: <201208141141.q7EBfiIe099885@givry.fdupont.fr> <AC13E895-93A9-4289-B416-2A273A3F0C34@cisco.com> <502A87DF.8080300@viagenie.ca>
In-Reply-To: <502A87DF.8080300@viagenie.ca>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Cc: ipv6@ietf.org
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Aug 2012 07:05:57 -0000

On 14/08/2012 18:16, Simon Perreault wrote:
> Le 2012-08-14 12:28, Fred Baker (fred) a écrit :
>> Where I'm coming from in this is an expectation on my part that
>> appears to not be shared. If duplicate MAC addresses are unusual but
>> reasonably common (happen with some probability like .01% or
>> whatever), there's a reasonable expectation that there would be a
>> work-around for the issue. The work-around, I suggest, would be to
>> have the station use a privacy address instead of a MAC-based address
>> when a duplicate MAC address is detected.
> 
> Since privacy addresses are supposed to be configured alongside regular
> SLAAC addresses, there should be no need for an explicit fallback. Just
> enable both SLAAC and privacy simultaneously. If SLAAC fails, you still
> have privacy.

True, but you won't have connectivity on any network that uses MAC address
registration as a form of weak access control. Not that IPv6 can solve that
problem, but it should be noted.

    Brian