[j-nsp] Re : IPv6 Routing Headers

[Eli Dart]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Pekka Savola wrote:
> On Tue, 24 Apr 2007, Kevin Oberman wrote:
>>> Kevin,
>>>
>>> Slide 20 of the presentation states that RH processing can not be
>>> deavtivat> ed on Juniper routers. Not sure whether that applies to
>>> JunOS, JunosE or bo> th.
>>>
>>> Cheers,
>> The issue is the RH0 header. RH2 is not a problem and is essential to
>> mobile services.
>>
>> Yesterday FreeBSD (which is the base OS of JUNOS) put out a patch to
>> it's development version to disable RH0 processing. A fix which allows
>> processing to be enabled/disabled and filtered is expected shortly (I am
>> building a test version now) and Juniper should be able to include it
>> fairly quickly. But for now, IPv6 on Junipers is a serious problem.
> 
> Well, given that RH0 processing only happens at the RE, filtering out 
> all RH messages at the lo0 inet6 input should also fix this.

Just for the record, a loopback filter does not stop transit traffic,
even if the transit traffic is processed on the RE.  (I tested it today).

		--eli

- --
Eli Dart                                         Office: (510) 486-5629
ESnet Network Engineering Group                  Fax:    (510) 486-6712
Lawrence Berkeley National Laboratory
PGP Key fingerprint = C970 F8D3 CFDD 8FFF 5486 343A 2D31 4478 5F82 B2B3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (FreeBSD)

iD8DBQFGMDmmLTFEeF+CsrMRAixDAJ4tF9rWvSUl0vF1vjyhGSh3lsW0wgCePQes
6P7hnWmV9rgO9G+HhKUxg9U=
=/Fr0
-----END PGP SIGNATURE-----