Re: [v6ops] control and security of DHCP

[Ray Hunter <[e-mail]>]

Nick Hilliard wrote:
> On 12/01/2014 01:36, Mark ZZZ Smith wrote:
>> 'Are Broadcast Multi-Access Subnetworks becoming "Considered Harmful"'?
>
> They're probably the worst possible way of handling multiple access
> networks, with the exception of all the others.
>
> And if anyone mentions ATM, I'm totally claiming godwin.
>
> Nick
>
>

Would the combination: IPv6/64 + L2 PVLAN + DHCPv6 setting the address  
+ DHCPv6 setting default router + HSRPv6 + input ACLs, provide you a 
solution to your requirements in a multi-tenant environment?
[Yes I know DHCPv6 setting default router does not yet exist in the 
world of IETF.]

Why would that be better than IPv6/64 + L2 PVLAN + RA + RA Router 
preference (4941) + DHCPv6 setting the address ?

If anything at all were possible, would your preferred combination for a 
bullet proof and predictable solution not be: prefix length >> 64 + 
PVLAN + DHCPv6 + DHCPv6 setting default router + HSRPv6 ?
[Yes I know prefix length >> 64 is heresy in IETF]

Then you'd have path equivalence and functional equivalence with IPv4 to 
ease operations and debugging.
Especially when stuff starts flapping, I suspect it's going to be a 
right royal pain to debug otherwise.

-- 
Regards,
RayH