RE: Fwd: Broadband Forum liaison to IETF on IPv6 security

The ND-Proxy has been presented in BBF but this does not solve the problem of Duplicate Address Issue in an N:! VLAN deployed model for BBF Architecture. 

Alan

-----Original Message-----
From: owner-v6ops@ops.ietf.org [mailto:owner-v6ops@ops.ietf.org] On Behalf Of Hemant Singh (shemant)
Sent: November 8, 2009 8:06 PM
To: Hemant Singh (shemant); Dunn, Jeffrey H.; Wes Beebee (wbeebee); Antonio Querubin
Cc: Thomas Narten; 6man-ads@tools.ietf.org; william.allen.simpson@gmail.com; Hesham Soliman; Erik Nordmark; Susan@core3.amsl.com; savi-ads@tools.ietf.org; Robin Mersh; Susan Thomson (sethomso); Fred Baker (fred); v6ops-ads@tools.ietf.org; IETF@core3.amsl.com; IPv6 Operations; Mailing List; JINMEI Tatuya / 神明達哉
Subject: RE: Fwd: Broadband Forum liaison to IETF on IPv6 security

So have I and Wes been able to close the issue for the DSL Forum folks?  Implement ND Proxy at your first-hop IPv6 router/access concentrator.  

Thanks,

Hemant

-----Original Message-----
From: ipv6-bounces@ietf.org [mailto:ipv6-bounces@ietf.org] On Behalf Of Hemant Singh (shemant)
Sent: Saturday, November 07, 2009 10:07 AM
To: Dunn, Jeffrey H.; Wes Beebee (wbeebee); Antonio Querubin
Cc: Thomas Narten; 6man-ads@tools.ietf.org; SAVI Mailing List; william.allen.simpson@gmail.com; Hesham Soliman; Erik Nordmark; Susan@core3.amsl.com; savi-ads@tools.ietf.org; Robin Mersh; Susan Thomson (sethomso); Fred Baker (fred); v6ops-ads@tools.ietf.org; IETF@core3.amsl.com; IPv6 Operations; Mailing List; JINMEI Tatuya / 神明達哉
Subject: RE: Fwd: Broadband Forum liaison to IETF on IPv6 security

Jeffrey,

The answer to your question is a yes.  Alternatively, the ISP may just dole out a delegated prefix shorter than a /64 and the CPE Rtr has to live with it but the ISP may use something like a /55 that gives sufficient number of links in the home LAN.  I will reply to any more discussion on this thread once I reach Hiroshima. 

Hemant

-----Original Message-----
From: Dunn, Jeffrey H. [mailto:jdunn@mitre.org]
Sent: Friday, November 06, 2009 7:31 PM
To: Hemant Singh (shemant); Wes Beebee (wbeebee); Antonio Querubin
Cc: Thomas Narten; Fred Baker (fred); 6man-ads@tools.ietf.org; SAVI Mailing List; william.allen.simpson@gmail.com; Hesham Soliman; IETF@core3.amsl.com; Erik Nordmark; savi-ads@tools.ietf.org; IPv6 Operations; Susan Thomson (sethomso); v6ops-ads@tools.ietf.org; Robin Mersh; Mailing List; Susan@core3.amsl.com; JINMEI Tatuya / 神明達哉; Dunn, Jeffrey H.
Subject: RE: Fwd: Broadband Forum liaison to IETF on IPv6 security

OK. Then the CPE router has a unique /64 for all of its broadcast domains? Does that mean that the customer needs to tell the ISP how many /64 prefixes they need?

Best Regards, 

Jeffrey Dunn
Info Systems Eng., Lead
MITRE Corporation.
(301) 448-6965 (mobile)

--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------