Charley - Aug 2, 2011 I think the real security issue with EUI-64 address assignment is that your IPv6 address contains your same MAC address, wherever you go. So your movements are trackable between home, work, and coffee shop networks. It has less to do with what the L2 address actually is. Charley - Aug 2, 2011 Also, you missed a part of the command to turn it off; it’s:

I’m not a fan of IPv6 privacy addressing. I understand the logic behind it, I really doo, obfuscate the LLADDR (MAC address) of the host in question, but I really dont’t see the realistic purpose. If someone wanted to use my mac address, what good would that really get them, unless they’re on the same layer 2 segment? More importantly, if they;re on the same layer 2 segment, they have my MAC address anyway.

Nick Buraglio - Jul 4, 2011 Sorry, I thought it best to sanitize my ipv6 space even though it’s not too hard to enumerate it.

It looks like MacOS 10.7 (Lion) has fully functioning DHCPv6. It’s about time. Before: After: pfSense setup: Using Internet Systems Consortium DHCP Server 4.2.1-P1 as the server (on my pfSense box) I am able to get not only a privacy address (via stateless autoconfigure) but also a normal EUI-64 address as well as an IPv6 address via dhcpv6. I didn’t do anything except use the “Automatic” setting in the network control panel, so out of the box OSX 10.

If anyone is interested in the talks I participated in at Joint Techs in Fairbanks, AK, they are now on the internet2 sites. IPv6 feature support IPv6 campus panel discussion They’re apparently not embeddable, but can be watched from the Joint Techs site. [[ This is a content summary only. Visit my website for full links, other content, and more! ]]

I did some minor tweaking to the Alcatel Lucent RANCID scripts and some modifications to make RANCID work under my pfsense environment (originally m0n0rancid code from John Skopis). Since I don’t really do much dev work and am not interested in maintaing a box do be an SVN server for the public, I threw it up onto google code. I’ll be adding a brief how-to on making RANCID work with pfSense as soon as I get some time.

TJ - Jul 6, 2011 THC-IPv6 is great, but IMHO Scapy is even better - ultimate flexibility once you take 15minutes to get comfortable with it :) /TJ Nick Buraglio - Jul 4, 2011 It’s on my list of things to mess around with. I’ve heard nothing but good things.

I’ve been a *BSD user since around 1997, when I installed NetBSD on a Mac SE 30 that I got for free. I was always intrigued with alternative operating systems like BeOS, *BSD, Plan9 and Linux so it made sense that I’d poke around with different systems. I’d gone back and forth from OpenBSD to FreeBSD but eventually settled on FreeBSD as my OS of choice. I ran it as a desktop before MacOS X came out and was generally happy with it.

I found most of this on a web page somewhere tha tI can’t seem to find again. Below are some common useful junos tidbits regarding routing tables and interface types/names: JunOS CLI supports the basic grep command (like | include) so any show commands can be grepped. I believe the grep command implies the -i flag for case insensitivity. The routing table is presented in such a way to group types of routes.

Chris64 - Jul 2, 2011 http://en.wikipedia.org/wiki/Comparison_of_stackable_switches OSPFv3/RIPng/multicast routing/… Nick Buraglio - Aug 0, 2011 This is a decent list for the stackable stuff. Routing protocols should really be broken out into another list, or maybe the lists should be reworked into stackable and chassis. I’m personally more interested in the chassis stuff because thats what I use, but all of it is important and relevant. bcscomputercity - Sep 5, 2011