The following will provide a reference point to get your IPv6 support started. The intention is not to be a total solution but a guide to get you or your group thinking of the network systems, services and functions that need to be configured in a manner that will provide secure and highly available service.
The folling is divided into the following:
General information could be accessed here. Or maybe just list the major areas of security. 1. Internet routing. 2. core LAN internetwork routing. 3. at the client edge equipment (switches). 4. End station. 5. Client applications. 6. Servers/Dat Center for items 2 through 5. 6. Am I missing anything?
maybe you only do one completed page here and all others are place holders to a default page stating that guidlines need to be developed for this particular routing scenario. Router notes Internet facing Router information Internetwork Routing information General ICMPv6 Edge Switch Policy Enterasys Ethernet
Mechanisms 1. Dual Stack 2. NAT64 / DNS64 reference 3. Tunnels
Edge Switch Policy Enterasys Ethernet
Service Provider Router Article CYMRU team
Router notes
Good DOCUMENT for some general WINDOWS Filtering:
Host based information, CERT.ORG
For WINDOWS it may be good to just list
some easy "netsh" commands to view IPv6 interface and
routing information.
Then just a few firewall commands such as
"Use the following command to block router redirects (type 137):
netsh advfirewall firewall add rule name "block icmpv6 type 137"
dir=in action=block
protocol=icmpv6:137,any
"
Windows getting started
MAC getting started
Linux getting started
others information getting started
IPv6 News -IPv6Fridays BLOG Host based information, CERT.ORG ISP Router info, CYMRU Team IPv6 participants world lauch statistics