Em 24-09-2015 08:36, Stuart Henderson escreveu: > What is the purpose of IPv6? The main purpose that I see is "ability to > continue getting internet addresses after v4 runout". (If it had been left > at that and didn't change a bunch of other things at the same time, perhaps > more people would be using it already).
This sure is the purpose now. Short term. But one of the main reasons the address space is so large, is for every connected device be accessible from every other. > > And, like it or not, the majority of network admins have learned their > trade in a post-NAT world, and are relying on things which are difficult or > impossible to do without that... Yes. I got that. But I prefer to learn to do things properly, even if it means it's more difficult. > So you're relying on your ISPs CPE for network addressing and it doesn't > have a way to add a static route? It seems like you would have the same > problem with v4, doesn't it? I can add a static route, yes. And it answers to IA_PD requests, and also IA_NA. So I've managed to get it working for my internal machines. The only issue is that the CPE wont try to route the prefix it delegated to me. What it does instead, is to keep asking, using NDP, who has the address. Hence the need for a NDP proxy. > > Can you terminate the session on the OpenBSD box instead? If you mean a pppoe or other way to get the IPv6 directly on the OpenBSD box, then no. My CPE is only routed, unfortunately. But this discussion gave me the idea of making a bridge for my dmz and using ULA with nat on my internal networks, that don't need much external connectivity. This also solve my problem of having only one /64 prefix. Cheers, Giancarlo Razzolini