IPv6 Renumbering - Security and Monitoring. D2.1 - Rules rewriting. D2.2 NetConf integration.
Résumé
Renumbering~\cite{rfc4192} is an integral part of the IPv6 protocol. This service is enabled by the Neighbor Discovery protocol. While offering several advantages, this protocol represents a serious security threat to the integrity of the network. This document describes the prototype we implemented to perform the update of Access-Lists in Cisco routers during a renumbering. It contains a presentation of the integration of the Cisco E-DI in our NetConf manager, and the rewriting of the rules themselves. This study was supported by CISCO Systems as part of the CISCO Applied Research and Developpement program.