04-23-2018 12:59 AM - edited 03-01-2019 05:55 PM
Hello All. Is there the best practice for securing access to ipv6 network on the internet edge routers?
Like for ipv4 below and i want make up something like that for ipv6.
access-list 100 deny ip 10.0.0.0 0.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 deny ip 172.16.0.0 0.15.255.255 any
access-list 100 deny ip 192.168.0.0 0.0.255.255 any
access-list 100 deny ip 224.0.0.0 15.255.255.255 any
Solved! Go to Solution.
04-23-2018 01:11 AM
Hi there,
What you are looking for is a prefix list of bogon and martian IPv6 addresses. Team Cymru host a static list which you can find here (it's pretty big!):
http://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt
...but they have updated their methods and you can now peer with them to receive a dynamically updated list:
https://www.team-cymru.com/bogon-reference.html
cheers,
Seb.
04-23-2018 01:11 AM
Hi there,
What you are looking for is a prefix list of bogon and martian IPv6 addresses. Team Cymru host a static list which you can find here (it's pretty big!):
http://www.team-cymru.org/Services/Bogons/fullbogons-ipv6.txt
...but they have updated their methods and you can now peer with them to receive a dynamically updated list:
https://www.team-cymru.com/bogon-reference.html
cheers,
Seb.
04-24-2018 02:58 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide