Re: Questions on IPv6 deployment

[William Herrin <bill () herrin us>]

On Mon, Jan 16, 2017 at 10:11 AM, Matthew Crocker
<matthew () corp crocker com> wrote:
> I’m looking for some direction/reading list of how to properly configure IPv6.  I’ve read to use a /64 for PtP 
> interfaces and I’ve read use a /128 instead.    Assign all loopbacks from the same /64, use a different /64 for each 
> loopback. Ect, ect.

Hi Matthew,

Suggest /128's for loopbacks and /124's for point to points, all from
the same /64. This way you don't burn space needlessly, don't open
yourself to neighbor discovery issues on point to points and can
filter inbound Internet packets to that /64 in one fell swoop so that
it's harder to hit your routers directly. Just make sure not to filter
the outbound packets.

Reminder: No matter what size you pick, use nibble boundaries for
visual and DNS convenience. So /124, not /126.

Regards,
Bill Herrin

-- 
William Herrin ................ herrin () dirtside com  bill () herrin us
Owner, Dirtside Systems ......... Web: <http://www.dirtside.com/>