3 ms·
Main issue is when you manage a TON of network devices. What's easier - connecting to something your OOB management network (10.10.1.0/24) - the fw is 10.10.1.
by deaps 8y ago
Main issue is when you manage a TON of network devices.
What's easier - connecting to something your OOB management network (10.10.1.0/24) - the fw is 10.10.1.1, the switch is 10.10.1.11, the 5 servers are 10.10.1.21-26, etc etc...
That's a bit better than typing 2200:Hb43:4432:FE39:019H:F3Z6:3438:2101 etc...
I realize internal dns solves that, but that's a lot of extra dns records to maintain - which ALSO is an issue if your organization uses HSTS and preloads subdomains - you must have have a trusted certificate on each management interface, otherwise the browser simply won't let you manage those things over a GUI - or, of course, being your own CA and loading your intermediate and/or root into every deployed box on your network of every person that could potentially have to manage those devices over HTTPS.
That's literally my only issue with ipv6, in all honesty.
- walrus01 8y agoYou really should have internal DNS records for everything, and internal reverse DNS that matches your IP address management system. Can't afford not to, for internal management networks. Also allows you to use autodiscovery and monitoring tools that discover and name devices by their rDNS. Having monitoring systems with hundreds to thousands of devices and things with only IP addresses and no hostnames is a nightmare.
- kiallmacinnes 8y agoThis pattern really only works at small scale. Add 5 more people, or 50 more servers - it'll fail. Either because your new colleagues don't have the same memory as you, or because switch 10 and server 1 are now conflicting...
- sedachv 8y agoYou can use static assignment for the /64 host portion. Having a large prefix to work with for the subnetting actually makes managing a large number of devices easier because you can group them into logical subnets, and in a way that future-proofs expansion. Coffeen covers this in IPv6 Address Planning. And on top of that you get way more efficient routing.