[c-nsp] IPV6 in general was Re: Large networks

Phil Mayers p.mayers at imperial.ac.uk
Fri Aug 28 09:16:02 EDT 2009


Grzegorz Janoszka wrote:
> Phil Mayers wrote:
>> Grzegorz Janoszka wrote:
>>> Yes, unfortunately it is only link-local. I am just trying to figure 
>>> it out how to marry link-local with our global ipv6 assignments.
>> That's now the way it works AFAICT.
>>
>> Basically, the routers still send router-advertisments. However, the 
>> link-local address in the next-hop is the HSRPv6 virtual IP, and floats 
>> between the active & backup.
>>
>> So you only *need* the link-local.
> 
> No, my routers do NOT send ra. I disable it as an incredibly insecure 
> mechanism.
> 

Fine - so point your clients statically at the virtual link-local 
address e.g. under Linux:

ip -f inet6 route add default via fe80::<the hsrp vip> dev eth0

What's the problem?


More information about the cisco-nsp mailing list