[ipv6-wg] Follow-Up on Niall's talk: Ramond (RA Monitoring Daemon)

Hi folks,

after his presentation learned from Niall that he didn't actually know
about the ramond, so here's some quick info for all who have a similar
situation like him:

Ramond is a little tool that listens for RAs and then matches the source
MAC address or whatever with a list of authorized routers.  It can clean
up after rogue router RAs by sending a follow-up RA with router lifetime
of 0 and deprecating all the advertised prefixes, and it can also run
some external programs/scripts to do additional clean up (like an
automated retaliation strike).  It's open source and should run on all
standard Unixes (so far I've only tested it on Linux myself), and of
course it can be combined with 802.1Q.

I've also covered it in the second half of my video blog episode at
http://www.stepladder-it.com/bivblog/23 with the most relevant parts
starting at about 15:00 into the video.

If you handle networks with a potential for rogue advertising routers
and don't know about the tool, I recommend you take a look at it.


Cheers,

    Benedikt

-- 
Benedikt Stockebrand,                   Stepladder IT Training+Consulting
Dipl.-Inform.                           http://www.stepladder-it.com/

          Business Grade IPv6 --- Consulting, Training, Projects

BIVBlog---Benedikt's IT Video Blog: http://www.stepladder-it.com/bivblog/