08-28-2013 01:28 AM
Hi,
it is not easy to locate devices making trouble without having a reliable MAC-IP mapping in BYOD environments. With IPv4 we can solve this at the switches side with DHCP-Snooping ans ARP-Protect to assure that only IP addresses assigned by DHCP can be used.
With IPv6 I have to find a new solution assure only IP addresses I can map to a device enter the network. IPv6 privacy extension makes this worse.
One solution would be logging mac addresses in the firewall log like other vendors do.
One option would be, having a log of NDP changes.
Has anybody other options in mind.
Greetings
Winfried
12-12-2013 07:36 AM
voted by me!
I hope that it will be in PAN 6.0.x
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
