On 6/10/2011 11:22 AM, Matthew Kaufman wrote:
On Jun 10, 2011, at 7:34 AM, Ray Soucy wrote:
I for one look forward to the day where things like RA Guard and MLD Snooping are standard on every switch. Just IPv6 growing pains.
I look forward to the day where "layer 2" switches don't need to implement hacks to fix "layer 3" flaws.
Matthew Kaufman
We already have that. Run everything as a point to point for layer 2, and there's no need to implement hacks. :P Granted, RA Guard could also be handled transparent to the layer 2 switches, but that requires a common security model to inform the devices who they are allowed to listen to. MLD Snooping is just a problem of the switch being too stupid to know which ports to send multicast out. It's technically not required if there's a layer 2 protocol to inform the switch, but those are in limited supply. Both issues often suffer heavily from multi-vendor interoperability problems. Jack