ExtremeSwitching (EXOS)

  • 1.  Block all IPv6 traffic

    Posted 05-31-2017 09:36
    How can i block all ipv6 trafic in xos?



  • 2.  RE: Block all IPv6 traffic

    Posted 05-31-2017 09:39
    You could write an ACL to block all traffic with ethertype 0x86DD.


  • 3.  RE: Block all IPv6 traffic



  • 4.  RE: Block all IPv6 traffic

    Posted 05-31-2017 21:30
    Thanks!


  • 5.  RE: Block all IPv6 traffic

    Posted 06-03-2017 16:30
    Hi Gerson,

    What if you just don't put IPv6 address on the interface/vlan? So there is no one can do IPv6 gatewaying? It is only work for L3 blocking.

    Best regards,


  • 6.  RE: Block all IPv6 traffic

    Posted 06-05-2017 02:23
    Exos does not work that way, almost every acl action is done on all packets, no matter if it is l2 switched or routed.


  • 7.  RE: Block all IPv6 traffic

    Posted 06-05-2017 02:23
    Hi Oscar,

    If using ACL, is that kind ACL processed by CPU or ASIC?

    Best regards,


  • 8.  RE: Block all IPv6 traffic

    Posted 06-05-2017 02:23
    ACL is done in Hardware (asic).


  • 9.  RE: Block all IPv6 traffic

    Posted 06-06-2017 09:54
    i work at a very large campus.

    A lot of routers are installed everyday without our knowledge.

    I'm concerned with those routers acting as IPv6 dhcp-servers.

    We have trusted ports well configured, but i suspect that it doesn't work for IPv6.

    Since we don't have IPv6 for users, i think that if we block it, that problem is solved for now.


  • 10.  RE: Block all IPv6 traffic

    Posted 06-06-2017 09:54
    Hi Gerson,

    Any specific reason to do this on L2 level? Is IPv6 traffic inside a client VLAN only matter to you since it will not gatewaying if you don't put IPv6 address on your L3? I think the L2 way only works if all your clients connected directly to your controllable switch, if not L3 way is more simple since the traffic will only reach your controllable switch for gatewaying or accessing different connected ports clients (or client switches) on the same VLAN.

    Best regards,