topic RE: Block all IPv6 traffic in ExtremeSwitching (EXOS/Switch Engine)

Block all IPv6 traffic

gbs — Wed, 31 May 2017 16:36:00 GMT

How can i block all ipv6 trafic in xos?

RE: Block all IPv6 traffic

OscarK — Wed, 31 May 2017 16:39:00 GMT

You could write an ACL to block all traffic with ethertype 0x86DD.

RE: Block all IPv6 traffic

Martineau__John — Wed, 31 May 2017 16:52:00 GMT

Here is the article to block IPv6
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-create-an-ACL-rule-to-block-IPv6-tr...

RE: Block all IPv6 traffic

gbs — Thu, 01 Jun 2017 04:30:00 GMT

Thanks!

RE: Block all IPv6 traffic

Mrxlazuardin — Sat, 03 Jun 2017 23:30:00 GMT

Hi Gerson,

What if you just don't put IPv6 address on the interface/vlan? So there is no one can do IPv6 gatewaying? It is only work for L3 blocking.

Best regards,

RE: Block all IPv6 traffic

OscarK — Mon, 05 Jun 2017 09:23:00 GMT

Exos does not work that way, almost every acl action is done on all packets, no matter if it is l2 switched or routed.

RE: Block all IPv6 traffic

Mrxlazuardin — Mon, 05 Jun 2017 09:23:00 GMT

Hi Oscar,

If using ACL, is that kind ACL processed by CPU or ASIC?

Best regards,

RE: Block all IPv6 traffic

OscarK — Mon, 05 Jun 2017 09:23:00 GMT

ACL is done in Hardware (asic).

RE: Block all IPv6 traffic

gbs — Tue, 06 Jun 2017 16:54:00 GMT

i work at a very large campus.

A lot of routers are installed everyday without our knowledge.

I'm concerned with those routers acting as IPv6 dhcp-servers.

We have trusted ports well configured, but i suspect that it doesn't work for IPv6.

Since we don't have IPv6 for users, i think that if we block it, that problem is solved for now.

RE: Block all IPv6 traffic

Mrxlazuardin — Tue, 06 Jun 2017 16:54:00 GMT

Hi Gerson,

Any specific reason to do this on L2 level? Is IPv6 traffic inside a client VLAN only matter to you since it will not gatewaying if you don't put IPv6 address on your L3? I think the L2 way only works if all your clients connected directly to your controllable switch, if not L3 way is more simple since the traffic will only reach your controllable switch for gatewaying or accessing different connected ports clients (or client switches) on the same VLAN.

Best regards,