DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers

Metadata

Publisher: IETF
Doc Type: Best Practice
Pages: 12
Abstract: This document specifies a mechanism for protecting hosts connected to a switched network against rogue DHCPv6 servers. It is based on DHCPv6 packet filtering at the layer 2 device at which the packets are received. A similar mechanism has been widely deployed in IPv4 networks ('DHCP snooping'); hence, it is desirable that similar functionality be provided for IPv6 networks. This document specifies a Best Current Practice for the implementation of DHCPv6-Shield.
Publication Date: 2015-08-01
Status Note: Best Current Practice
DOI: 10.17487/RFC7610
Link: https://doi.org/10.17487/RFC7610
Author(s): Fernando Gont
Will (Shucheng) LIU
Gunter Van de Velde

Latest version of IETF RFC 7610

Document Versions — IETF RFC 7610

▶ IETF RFC 7610 (2015-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2460 [Superseded*]
IETF RFC 3315 [Superseded*]
IETF RFC 4303 [Active*]
IETF RFC 4861 [Active*]
IETF RFC 5722 [Active*]
IETF RFC 7045 [Active*]
IETF RFC 7112 [Active*]

Bibliographic Reference(s)

IETF.draft-gont-6man-rfc6564bis-00 — IPV6-UEH EXTERNAL
IETF.draft-ietf-dhc-secure-dhcpv6-07 — SECURE-DHCPV6 EXTERNAL
SI6 Networks, "IPv6 NIDS evasion and improvements in IPv6 fragmentation/reassembly", 2012, < http://blog.si6networks.com/2012/02/ ipv6-nids-evasion-and-improvements-in.html >. EXTERNAL
IANA, "Protocol Numbers", < http://www.iana.org/assignments/protocol-numbers >. EXTERNAL
Gont, F., "Security Assessment of the Internet Protocol version 6 (IPv6)", UK Centre for the Protection of National Infrastructure, (available on request). EXTERNAL
IETF RFC 6104 [Active*]
IETF RFC 6105 [Active*]
IETF RFC 7113 [Active*]
IETF RFC 7513 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7610.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7610, DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers. Available at https://doi.org/10.17487/RFC7610

Snippet:

IETF RFC 7610, DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers. Available at https://doi.org/10.17487/RFC7610

HTML (ISO 690 compliant)

Preview:

IETF RFC 7610, DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers. Available at https://doi.org/10.17487/RFC7610

Snippet:

<span class="citation"><cite>IETF RFC 7610</cite>, DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers. Available at <a href="https://doi.org/10.17487/RFC7610" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7610</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7610, DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers
doi: 10.17487/RFC7610
url: https://doi.org/10.17487/RFC7610

Snippet:

<li>
<cite id="bib-rfc7610">IETF RFC 7610</cite>, DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers
<span class="doi">10.17487/RFC7610</span>
</li>

Referenced By

IETF RFC 8106 [Active*]
IETF RFC 8415 [Superseded*]
IETF RFC 8910 [Active*]
IETF RFC 9762 [Active*]
IETF RFC 9915 [Active*]