[ipv6hackers] IOS NDP Inspection and First Hop Security Enhancements

34 views
Skip to first unread message

Jim Small

unread,
Jan 28, 2012, 4:04:17 PM1/28/12
to IPv6 Hackers Mailing List (ipv6hackers@lists.si6networks.com)
Hello,

I know Fernando has reviewed IOS RA Guard and shown its deficiencies. Has anyone reviewed the newest IOS IPv6 First Hop Security Enhancements such as NDP Inspection to see how effective the features are?

--Jim

_______________________________________________
Ipv6hackers mailing list
Ipv6h...@lists.si6networks.com
http://lists.si6networks.com/listinfo/ipv6hackers

Marc Heuse

unread,
Jan 29, 2012, 6:34:44 AM1/29/12
to IPv6 Hackers Mailing List
same mechanism so same problems :-)
(and is implemented also in the thc-ipv6 tools for NDP, e.g. parasite6
and fake_advertise6 etc.)

--
Marc Heuse
Mobil: +49 177 9611560
Fax: +49 30 37309726
www.mh-sec.de

Marc Heuse - IT-Security Consulting
Winsstr. 68
10405 Berlin

Ust.-Ident.-Nr.: DE244222388
PGP: FEDD 5B50 C087 F8DF 5CB9 876F 7FDD E533 BF4F 891A

Reply all
Reply to author
Forward
0 new messages