RFC 7610: DHCPv6-Shield: Protecting against Rogue DHCPv6 Servers

This document specifies a mechanism for protecting hosts connected to a switched network against rogue DHCPv6 servers. It is based on DHCPv6 packet filtering…

Read RFC 7610 on the RFC Editor

Outgoing relationships (12 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 2460: Internet Protocol, Version 6 (IPv6) Specification
Normative reference — RFC 3315: Dynamic Host Configuration Protocol for IPv6 (DHCPv6)
Normative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Normative reference — RFC 4861: Neighbor Discovery for IP version 6 (IPv6)
Normative reference — RFC 7045: Transmission and Processing of IPv6 Extension Headers
Normative reference — RFC 5722: Handling of Overlapping IPv6 Fragments
Normative reference — RFC 7112: Implications of Oversized IPv6 Header Chains
Informative reference — RFC 6105: IPv6 Router Advertisement Guard
Informative reference — RFC 6104: Rogue IPv6 Router Advertisement Problem Statement
Informative reference — RFC 7113: Implementation Advice for IPv6 Router Advertisement Guard (RA-Guard)
Informative reference — RFC 7513: Source Address Validation Improvement (SAVI) Solution for DHCP

Incoming relationships (7 related RFCs)

Informatively referenced by — RFC 8106: IPv6 Router Advertisement Options for DNS Configuration
Informatively referenced by — RFC 9463: DHCP and Router Advertisement Options for the Discovery of Network-designated Resolvers (DNR)
Informatively referenced by — RFC 9099: Operational Security Considerations for IPv6 Networks
Informatively referenced by — RFC 7969: Customizing DHCP Configuration on the Basis of Network Topology
Informatively referenced by — RFC 9915: Dynamic Host Configuration Protocol for IPv6 (DHCPv6)
Informatively referenced by — RFC 8910: Captive-Portal Identification in DHCP and Router Advertisements (RAs)
Informatively referenced by — RFC 9762: Using Router Advertisements to Signal the Availability of DHCPv6 Prefix Delegation to Clients