Estonian IPv6 deployment report

[bedard.phil at gmail.com (Phil Bedard)]

The access boxes and BNG typically have protection mechanisms in place.  Also even though customers are in a shared VLAN and IP subnet they aren't typically on the same broadcast domain.  In the case of active Ethernet you use things like private Vlans or other access controls.  

Phil

-----Original Message-----
From: "Anders Löwinger" <anders at abundo.se>
Sent: â??12/â??27/â??2014 11:17 AM
To: "nanog at nanog.org" <nanog at nanog.org>
Subject: Re: Estonian IPv6 deployment report

On 2014-12-22 16:27, Tarko Tikan wrote:

> Our access network is mix of DSL/GPON/wimax/p2p-ETH and broadband service is
> deployed in shared service vlans. IPv6 traffic shares vlan with IPv4.

How do you protect customers from each other?

There are many nasty IPv6 attacks you can do when on a shared VLAN.

/Anders