The access boxes and BNG typically have protection mechanisms in place. Also even though customers are in a shared VLAN and IP subnet they aren't typically on the same broadcast domain. In the case of active Ethernet you use things like private Vlans or other access controls. Phil -----Original Message----- From: "Anders Löwinger" <anders@abundo.se> Sent: 12/27/2014 11:17 AM To: "nanog@nanog.org" <nanog@nanog.org> Subject: Re: Estonian IPv6 deployment report On 2014-12-22 16:27, Tarko Tikan wrote:
Our access network is mix of DSL/GPON/wimax/p2p-ETH and broadband service is deployed in shared service vlans. IPv6 traffic shares vlan with IPv4.
How do you protect customers from each other? There are many nasty IPv6 attacks you can do when on a shared VLAN. /Anders