Estonian IPv6 deployment report

[anders at abundo.se (Anders Löwinger)]

On 2014-12-27 17:27, Tarko Tikan wrote:
> Split-horizon (switchport protected in Cisco world). Customers can't send
> packets directly to each other, all communication has to go via BNG router.
> Obviously we protect L2 as well like limiting number of MACs per customers,
> make sure BNG MAC cannot be learned from customer ports etc. We don't use
> any L3 (both v4 and v6) inspection in ANs, everything happens in BNG.

Ok seems simple enough.

I assume you have a star-network below the BNG? Ie no rings or similar in the
access network?


/Anders