Stop assigning link-local IPv6 on selected interfaces?
-
For security reasons, I want to prevent certain cross port communications. It is easy to do with IPv4, but all devices have link-local IPv6 addresses. Can the automatic assignment of these addresses be stopped and removed?
-
@CPM-geezer huh? what cross port sort of talking?
-
The link local address is used for a lot. What you're asking for would essentially break the system. Also, link local traffic does not leave the local network, so pfSense has no effect on it.
-
Thank you for the advice. I learned that a VPN will do what I want.
Charlie
-
@CPM-geezer which is what exactly.. Not sure what you think happens when an interface has a link local address.
-
@johnpoz I'm not sure either.
-
@CPM-geezer said in Stop assigning link-local IPv6 on selected interfaces?:
all devices have link-local IPv6 addresses. Can the automatic assignment of these addresses be stopped and removed?
Link-local addresses are required by the IPv6 standard, and many higher level IPv6 protocols utilize them. As noted above, disabling them would simply break your network.
-
@CPM-geezer said in Stop assigning link-local IPv6 on selected interfaces?:
I'm not sure either.
then why would you think you should get rid of them?
What issue were you seeing that your vpn fixed for you?
Privacy Policy · Cookie Policy