IPv6 Renumbering - Security and Monitoring. D1.2 - Functional Architecture
Résumé
Renumbering is an integral part of the IPv6 protocol. This service is enabled by the Neighbor Discovery protocol. While offering several advantages, this protocol represents a serious security threat to the integrity of the network. The renumbering procedure can indeed create vulnerabilities in the network security by deploying a parallel routing infrastructure for a new prefix. This document contains an overview of the functional architecture we intend to set up, and a description of each component, and especially the interaction with routers (Cisco Equipments, Linux based routers) and personal firewalls. This study was supported by CISCO Systems as part of the CISCO Applied Research and Developpement program.