4 ms·
Sorry I'm not sure i understand: > Another wrong in the name of IPv6: 64 bit IPv6 prefixes from an ISP means you can only have one subnet. No way to put your d
by AlphaSite 8y ago
Sorry I'm not sure i understand:
> Another wrong in the name of IPv6: 64 bit IPv6 prefixes from an ISP means you can only have one subnet. No way to put your dodgy IoT stuff on its own VLAN.
Can't your router handle carving up a subnet just fine?
- bdamm 8y agoA lot of self-assigned IPv6 networks just tack on the device's 64-bit MAC address on to the end of some 64-bit network prefix. So if you're going with self-assignment of IPv6 addresses then you will have difficulty if your assigned prefix is already 64-bits, since you can't really use any of the 64-bit suffix bits for your own network.
- berti 8y agoThe mechanism is called StateLess Address Auto-Configuration (SLAAC) [0]. It removes the need for DHCP, and the determinism is very convenient. There are of course privacy downsides for deterministic addresses that are globally routable, and that's where SLAAC privacy extensions come in [1]. [0] https://en.wikipedia.org/wiki/IPv6#Stateless_address_autoconfiguration_(SLAAC) https://en.wikipedia.org/wiki/IPv6#Stateless_address_autocon... [1] https://en.wikipedia.org/wiki/IPv6#SLAAC_privacy_extensions https://en.wikipedia.org/wiki/IPv6#SLAAC_privacy_extensions
- lloeki 8y agoMore precisely, disabling the autonomous addressing flag in the router advertisement packet allows you to completely control the addresses which will then only be handled by DHCPv6, which allows you to slice a /64. But that means no v6 temporary addresses for anonymisation, which might be exactly what you want in a managed network/corporate scenario which requires liability tracing.
- KMag 8y agoWhat are you using at layer 2 that has 64-bit MAC addresses?