1 / 5

Operational Security Considerations for IPv6 Networks

Operational Security Considerations for IPv6 Networks. K. Chittimaneni, E. Vyncke , M. Kaeo. RIPE65, September 27, 2012 Amsterdam, Netherlands. Document Intro. Why write this? Consolidated document for IPv6 security best practices What does it cover? Generic Security Considerations

doli
Download Presentation

Operational Security Considerations for IPv6 Networks

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Operational Security Considerations for IPv6 Networks K. Chittimaneni, E. Vyncke, M. Kaeo RIPE65, September 27, 2012 Amsterdam, Netherlands

  2. Document Intro • Why write this? • Consolidated document for IPv6 security best practices • What does it cover? • Generic Security Considerations - Addressing Architecture - Link-Layer Security - Control Plane Security - Routing Security - Logging/Monitoring - Transition/Coexistence Technologies - General Device Hardening • Enterprise Specific Security Considerations • ISP Specific Security Considerations • Residential Specific Security Considerations

  3. Want Operator Updates • Is anyone using RTBH and uRPF for IPv6? • What are most effective logging mechanisms and possible issues to be resolved? • What are ND/RA rate limiting parameters that are deployed? • Is anyone using SeND / CGA? • Overall review to get most up-to-date deployment best practices

  4. ToDo • Solicit feedback from global ops communities • http://tools.ietf.org/html/draft-ietf-opsec-v6-00 • https://www.ietf.org/mailman/listinfo/opsec • Continue to work with v6ops and homenetWGs to avoid overlaps or conflicts

  5. Q&A THANK YOU!

More Related