mailing list archives
Re: IPv6 RA vs DHCPv6 - The chosen one?
From: Jeff Wheeler <jsw () inconcepts biz>
Date: Fri, 23 Dec 2011 16:23:31 -0500
On Fri, Dec 23, 2011 at 4:13 PM, Mohacsi Janos <mohacsi () niif hu> wrote:
If you can limit number of ARP/NDP entries per interfaces and you complement
RAGuard and DHCPv4 snooping your are done.
That depends on how ARP/ND gleaning works on the box. In short, Cisco
already has a knob to limit the number of ND entries per interface on
some of their kit, and it is not a solution, only a damage mitigation
Jeff S Wheeler <jsw () inconcepts biz>
Sr Network Operator / Innovative Network Concepts