[c-nsp] IPv6 nd table on the 6500
Phil Mayers
p.mayers at imperial.ac.uk
Thu May 5 03:08:54 EDT 2011
On 05/05/2011 07:46 AM, Saku Ytti wrote:
> Speaking of ND entries, they appear to carry significant new DoS vector which
> is rather hard to fix and it appears that not even new gear have given it much
> thought at all.
>
>
I saw some IOS roadmap stuff for IPv6 ND DoS protection recently -
2-phase (1: global "prevent ND DoS", 2: per-interface "Prevent") so
Cisco are at least aware of it.
More information about the cisco-nsp
mailing list