IPv6 Prefix Policy

[bicknell at ufp.org (Leo Bicknell)]

In a message written on Thu, Jul 03, 2008 at 04:55:37PM +0200, Jeroen Massar wrote:
> In general though, ASNs are following:
> http://www.space.net/~gert/RIPE/ipv6-filters.html
> 
> I don't know how common the strict/non-strict case is though, but 
> looking at GRH (http://www.sixxs.net/tools/grh/) it seems that most 
> ASN's are properly filtering, thus using the strict model.

The strict filter is still broken in at least one way.

ipv6 prefix-list ipv6-ebgp-strict permit 2001:500::/30 ge 48 le 48

http://www.arin.net/reference/micro_allocations.html

Note that there are /45's, /46's, /47's and /48's right now.  The
filter allows only /48's.  Of note, this will break access to the
F-Root name server, we announce it from both a /47 and a /48 (local
peers only) in IPv6.

I believe there are other issues with the strict filter, but don't have
the time to track them down right now.

-- 
       Leo Bicknell - bicknell at ufp.org - CCIE 3440
        PGP keys at http://www.ufp.org/~bicknell/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20080703/b0872ad9/attachment.bin>