Re: Thoughts about RA en DHCPv6 in /etc/network/interfaces

On 2010-12-08T20:31:24+0100, chiel <[email protected]> wrote:
> I configured a static IPv6 address in /etc/network/interfaces with the
> line "iface eth0 inet6 static", all works good. However, because RA are
> being send I also have a SLAAC address, resulting in two IPv6 addresses.
> I know that I can disable the SLAAC behaviour somewhere in a config file
> but that is not the point.
> Wouldn't it be better if RA messages be ignored once you specified
> "iface eth0 inet6 static"? This result in a more understandable
> configuration and I also think a lot of administrator will neglect to
> turn off RA configurations once the server has a static address,
> resulting in a possible security/stability issues when RA are start
> being sent by either a legitimate or rogue node.

There is a bug report about this: http://bugs.debian.org/604136

-- 
Kenyon Ralph

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=dBQM
-----END PGP SIGNATURE-----