| From: | Hiroki Sato <hrs@xxxxxxxxxx> |
| Date: | Wed, 29 Dec 2004 07:16:48 +0900 (JST) |
Jeffrey Hsu <hsu@xxxxxxxxxxx> wrote in <41D1C96A.2010805@xxxxxxxxxxx>: hsu> Since the default behavior is the same, how useful is the hsu> added functionality to optionally not accept RAs? Also, is hsu> there a corresponding change to ifconfig required? Thanks. For a multi-homed IPv6 host with multiple NICs, that the host accepts all RAs can be a problem because they are not always trusted and can confuse the routing table and so on. While the autoconfiguration of IPv6 using RAs itself can be performed independently on each interface, if the administrator cannot control which interface accepts RAs (currently "all" or "nothing" can be set via sysctl), he cannot connect the host to untrusted IPv6 network, for example. Changes to the userland utility are needed, too. KAME implements ndp(8) to handle the flag and I think I will submit the patch soon. -- | Hiroki SATO
Attachment:
pgp00025.pgp
Description: PGP signature