logoalt Hacker News

Tractor8626 • last Friday at 5:03 PM • 4 replies • view on HN

Is there yet answer to question "how to get random self-assigned addresses into dns records, firewall rules and switch acls?" ?

Replies

jcgl • last Saturday at 5:29 PM

802.1x instead of switch ACLs SSSD (Linux) or Active Directory (Windows) or other more custom solutions for dynamic DNS Firewalls rules that use those dynamic DNS names

Bonus: the relatively recent RFC 9686 that I hope will get some good traction: https://datatracker.ietf.org/doc/rfc9686/

patmorgan23 • last Friday at 9:07 PM

Dynamic DNS, DHCP, and static assignment are all still part of IPv6. Putting single IPs in switch ACLs is an anti pattern. Consider zero trust or working with whole subnets(they're plentiful in v6) instead.

➕ show 3 replies
ectospheno • last Friday at 9:39 PM

Turn off temp addresses. If your prefix changes then use ULA addresses.

➕ show 2 replies
bigfatkitten • last Friday at 8:46 PM

"Build yourself an IPAM solution, at great operational cost and complexity."