© 2011 Infoblox Inc. All Rights Reserved.
Paul Ebersman, IPv6 Evangelist
@paul_ipv6, pebersman@infoblox.com
DHCPv6 Issues
...
© 2011 Infoblox Inc. All Rights Reserved.
2
Mac vs DUID
© 2011 Infoblox Inc. All Rights Reserved.
DUID vs MAC
§  Mac address as ID is flawed:
–  Not always unique
–  Can be alte...
© 2011 Infoblox Inc. All Rights Reserved.
4
What DUIDs do right
§  One DUID per DHCP server or client
§  One Identity As...
© 2011 Infoblox Inc. All Rights Reserved.
5
Where DUIDs don’t work…
§  Anyone using mac address for
identification or fil...
© 2011 Infoblox Inc. All Rights Reserved.
6
RA vs DHCPv6
© 2011 Infoblox Inc. All Rights Reserved.
The addressing wars…
§  RAs
– RDNS (RFC 6106) support inconsistent
– Only prefi...
© 2011 Infoblox Inc. All Rights Reserved.
8
Unresolved
© 2011 Infoblox Inc. All Rights Reserved.
Still not standardized
§  Prefix Delegation
§  /etc/resolv.conf and multiple D...
© 2011 Infoblox Inc. All Rights Reserved.
10
Thank you!
Upcoming SlideShare
Loading in …5
×

ION San Diego - DHCPv6 Issues

299 views

Published on

Paul Ebersman's slides for the "Advancing the Network: Where We've Been, Where We're Headed" panel at ION San Diego on 11 December 2012.

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
299
On SlideShare
0
From Embeds
0
Number of Embeds
20
Actions
Shares
0
Downloads
5
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

ION San Diego - DHCPv6 Issues

  1. 1. © 2011 Infoblox Inc. All Rights Reserved. Paul Ebersman, IPv6 Evangelist @paul_ipv6, pebersman@infoblox.com DHCPv6 Issues ISOC ION – 11 Dec 2012 1
  2. 2. © 2011 Infoblox Inc. All Rights Reserved. 2 Mac vs DUID
  3. 3. © 2011 Infoblox Inc. All Rights Reserved. DUID vs MAC §  Mac address as ID is flawed: –  Not always unique –  Can be altered –  Multi-interface hosts confuse things §  But it’s what most of the eyeballs on the Internet are ID’ed by currently §  DUID (DHCP Unique Identifier) is the replacement in IPv6 3
  4. 4. © 2011 Infoblox Inc. All Rights Reserved. 4 What DUIDs do right §  One DUID per DHCP server or client §  One Identity Association (IA) per network interface on a host §  A host can DHCP for all interfaces via DUID/ IA as unique key
  5. 5. © 2011 Infoblox Inc. All Rights Reserved. 5 Where DUIDs don’t work… §  Anyone using mac address for identification or filtering §  Anyone trying to correlate IPv4 and IPv6 to the same machine/user §  Persistent storage of DUID may cause surprises
  6. 6. © 2011 Infoblox Inc. All Rights Reserved. 6 RA vs DHCPv6
  7. 7. © 2011 Infoblox Inc. All Rights Reserved. The addressing wars… §  RAs – RDNS (RFC 6106) support inconsistent – Only prefixes, default route, RDNS – Can’t do complex configs/options §  DHCPv6 – No default route – Usually not on link local, more complex – Requires RA to set O/M bits 7
  8. 8. © 2011 Infoblox Inc. All Rights Reserved. 8 Unresolved
  9. 9. © 2011 Infoblox Inc. All Rights Reserved. Still not standardized §  Prefix Delegation §  /etc/resolv.conf and multiple DHCP leases §  Multiple default routes §  OS implementations of RFC 6724 9
  10. 10. © 2011 Infoblox Inc. All Rights Reserved. 10 Thank you!

×