[olug] Ipv6 help/pointers

[Rob Townley]

IPv6 should have built-in authentication, and IPSec encryption should be
easier with IPv6 at least to the PSTN handoff.

If anyone else uses FlowRoute, i just added that IPv6 as a feature
suggestion.  A google account works to create an account on their forums.
https://support.flowroute.com/entries/22079095-IPv6-brings-with-it-authentication-and-makes-encryption-easier


On Sat, Jul 27, 2013 at 11:45 PM, Shawn L. Djernes <shawn at djernes.org>wrote:

> I am a Digium dCap and I put the boxes hanging on the net all the time. I
> use the iptables firewall and Asterisk's internal ACL to take care of most
> concerns. I also use mixed number - letter peer names and random generated
> secrets. You also obviously need to make sure your contexts are setup
> correctly.
>
> If you want some help with this contact me off list.
>
>
>
> ---
> Shawn L. Djernes
> SD Consulting
> E-mail: sdjernes at gmail.com
> Phone: +1 402 350-6973
> FAX: +1 888 297-6310
>
> On Jul 27, 2013, at 23:16, Justin Reiners <justin at hotlinesinc.com> wrote:
>
> > Sadly century link does offer ipv6, but at a premium on long distance, we
> > use about 120,000 minutes a month on our website t1s alone, we signed up
> > but the won't budge on long distance. We got a trunk from 8x8, lower
> price
> > per min but no ipv6.
> >
> > I have been trying router magic to make it work. Something about a
> asterisk
> > box just sitting out on the net that makes me cringe a little. And
> > barracuda NG 5.4.1 has a sip proxy bug I am waiting for a fix of. Other
> > than that I love the boxes.
> >
> > Sent from my Google Nexus 10 Tablet.
> > On Jul 27, 2013 11:01 PM, "Shawn L. Djernes" <shawn at djernes.org> wrote:
> >
> >> Depends on how much SIP traffic you are buying. If you were looking at
> >> Century Link you are probably not looking high enough up the food chain
> to
> >> find a IPv6 capable carrier.
> >>
> >> The only carriers I know have IPv6 are Tier 1 like Level 3 and XO.
> >>
> >> ---
> >> Shawn L. Djernes
> >> SD Consulting
> >> E-mail: sdjernes at gmail.com
> >> Phone: +1 402 350-6973
> >> FAX: +1 888 297-6310
> >>
> >> On Jul 27, 2013, at 21:30, Justin Reiners <justin at hotlinesinc.com>
> wrote:
> >>
> >>> I am going to go ahead and answer my own question. A /64 can but should
> >> not
> >>> be subnetted smaller. As it breaks autoconfiguration. Century link took
> >> my
> >>> /64 back and hooked me up with a /48 which allows for 65000 /64
> subnets.
> >> I
> >>> am now running dual stacks, on multiple subnets, and without nat, just
> >>> using my firewalls, I am very happy.
> >>>
> >>> Now to find an ipv6 ready sip provider.
> >>>
> >>> Cosentry is not even providing ipv6 yet which is absolutely crazy.
> >>>
> >>> Moving to lococolo next week and I will be ipv6 ready and implemented
> in
> >>> all but one site. Yay!
> >>> On Jul 24, 2013 3:06 PM, "Justin Reiners" <justin at hotlinesinc.com>
> >> wrote:
> >>>
> >>>> I am implementing ipv6 here at work, we were given a /64 from
> >> centurylink.
> >>>> everywhere I read online they say not to subnet a /64 . I would like
> to
> >>>> split it between DMZ and lan  networks. Anyone have any good
> references
> >> for
> >>>> ipv6 subnetting? Can a /64 be split into like a million /63s?
> >>> _______________________________________________
> >>> OLUG mailing list
> >>> OLUG at olug.org
> >>> https://lists.olug.org/mailman/listinfo/olug
> >> _______________________________________________
> >> OLUG mailing list
> >> OLUG at olug.org
> >> https://lists.olug.org/mailman/listinfo/olug
> > _______________________________________________
> > OLUG mailing list
> > OLUG at olug.org
> > https://lists.olug.org/mailman/listinfo/olug
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> https://lists.olug.org/mailman/listinfo/olug
>