nanog mailing list archives

Re: /27 the new /24


From: Sander Steffann <sander () steffann nl>
Date: Sun, 4 Oct 2015 17:58:26 +0200

Hi,

Op 4 okt. 2015, om 16:52 heeft Mel Beckman <mel () beckman org> het volgende geschreven:

If it doesn't support IPSec, it's not really IPv6. Just as if it failed to support any other mandatory IPv6 
specification, such as RA. 

I think you're still looking at an old version of the IPv6 Node Requirements. Check 
https://tools.ietf.org/html/rfc6434#section-11, specifically this bit:

"""
Previously, IPv6 mandated implementation of IPsec and recommended the key management approach of IKE.  This document 
updates that recommendation by making support of the IPsec Architecture a SHOULD for all IPv6 nodes.
"""

This was published in December 2011.

Cheers,
Sander


Current thread: