[c-nsp] IPv6 nd table on the 6500

Phil Mayers p.mayers at imperial.ac.uk
Thu May 5 03:08:54 EDT 2011


On 05/05/2011 07:46 AM, Saku Ytti wrote:

> Speaking of ND entries, they appear to carry significant new DoS vector which
> is rather hard to fix and it appears that not even new gear have given it much
> thought at all.
>
>

I saw some IOS roadmap stuff for IPv6 ND DoS protection recently - 
2-phase (1: global "prevent ND DoS", 2: per-interface "Prevent") so 
Cisco are at least aware of it.


More information about the cisco-nsp mailing list