⌕ Поиск по атласу

IETF · RFC · RFC7610

RFC7610 · DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers

DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers

This document specifies a mechanism for protecting hosts connected to a switched network against rogue DHCPv6 servers. It is based on DHCPv6 packet filtering at the layer 2 device at which the packets are received. A similar mechanism has been widely deployed in IPv4 networks ('DHCP snooping'); hence, it is desirable that similar functionality be provided for IPv6 networks. This document specifies a Best Current Practice for the implementation of DHCPv6-Shield.

Официальная английская аннотация

This document specifies a mechanism for protecting hosts connected to a switched network against rogue DHCPv6 servers. It is based on DHCPv6 packet filtering at the layer 2 device at which the packets are received. A similar mechanism has been widely deployed in IPv4 networks ('DHCP snooping'); hence, it is desirable that similar functionality be provided for IPv6 networks. This document specifies a Best Current Practice for the implementation of DHCPv6-Shield.

Связи документа

is_also: BCP199

Официальный источник · 2015-08-01

Полные импортированные сведения карточки
{
  "id": "RFC7610",
  "number": 7610,
  "title_en": "DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "This document specifies a mechanism for protecting hosts connected to a switched network against rogue DHCPv6 servers. It is based on DHCPv6 packet filtering at the layer 2 device at which the packets are received. A similar mechanism has been widely deployed in IPv4 networks ('DHCP snooping'); hence, it is desirable that similar functionality be provided for IPv6 networks. This document specifies a Best Current Practice for the implementation of DHCPv6-Shield.",
  "authors": [
    "F. Gont",
    "W. Liu",
    "G. Van de Velde"
  ],
  "organizations": [],
  "publication_date": "2015-08-01",
  "current_status": "BEST CURRENT PRACTICE",
  "current_status_ru": "Лучшая современная практика",
  "publication_status": "BEST CURRENT PRACTICE",
  "publication_status_ru": "Лучшая современная практика",
  "lifecycle": "active",
  "lifecycle_ru": "Действующий",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "ops",
  "area_ru": "Эксплуатация и управление",
  "working_group": "opsec",
  "source_draft": "draft-ietf-opsec-dhcpv6-shield-08",
  "page_count": 12,
  "doi": "10.17487/RFC7610",
  "keywords": [],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [
      "BCP199"
    ],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc7610/",
    "html": "https://www.rfc-editor.org/rfc/rfc7610.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc7610.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc7610/"
  }
}