Re: [CentOS] transition to ip6

Hi Lee,

If the addresses are auto-discovered, how are you supposed to be able to configure filtering rules for what you want to let through?

very simply.

1. Each interface on an IPv6 enabled machine has several addresses. One of them is the autoconfigured address, one is the (a) Privacy Extension address, and then you can still configure addresses manually. Obviously the latter method is the right choice for servers.

2. Except for the Privacy Extension address(es), auto-configured addresses are static (although virtually unmemorisable) as long as the prefix and the host's MAC address are. So there is a static address that you can put into your DNS and configure on your firewall.

Best regards,

Peter.