Securing IPv6 Without Breaking It
Time 10/05/11 03:00PM-04:00PM
Session Abstract
As networks make the move to IPv6, existing configurations for network security can't simply be copied over from the IPv4 world. Widely-used firewall and filter configurations will cause serious problems for IPv6, blocking Path MTU Discovery, preventing nameservers from answering queries, and breaking the end-to-end connection model. This presentation explains what needs to be done differently, demonstrates how overzealous filtering causes operational problems, and offers suggestions for finding and fixing them in real-world networks.
Speakers
Speaker William Owens NYSERNet
Presentation Media
Secondary tracks Security Network Planning and Engineering Advanced Network Services and Leadership Advanced Network Infrastructure