[AusNOG] Default IPv6 Local Only Addressing for Non-Internet Devices

[Matthew Moyle-Croft]

+1

Fine if a manufacturer wants to add a nerd knob for this, but as a default, no. 

I want a printer to get new firmware and keep it upto date - NOT getting firmware updates is normally a major security risk.

MMC

> On 16 Oct 2019, at 12:50 pm, James Hodgkinson <yaleman at ricetek.net> wrote:
> 
> I could see it as being a great option, but making it a default would be a support nightmare.
> 
> "but grandma's printer works from anywhere, why doesn't mine?"
> 
> James
> 
> On Wed, 16 Oct 2019, at 12:06, Paul Brooks wrote:
>> On 15/10/2019 2:33 pm, Mark Smith wrote:
>>> I recently bought an IPv6 enabled Wifi printer. As it is attached to
>>> my single Wifi SSID it is configuring itself with IPv6 global
>>> addresses, even though I don't need it to be reachable from the
>>> Internet or able to reach the Internet. (It would be relatively hard
>>> to find from the Internet anyway with /64 prefix, and there is an IPv6
>>> firewall in front if it).
>>> 
>>> I think it would be better for these types of "Non-Internet' devices
>>> not to configure themselves with global IPv6 addresses by default.
>> 
>> It probably checks back to home base for firmware updates, and 
>> downloads firmware
>> updates direct from the manufacturer - it will need a global address 
>> for that.
>> 
>> It probably has a function (that may or may not be enabled by default) 
>> to register
>> with an external rendezvous site to enable you to print to it from 
>> outside your home
>> network, or via an app or plugin from a mobile device - it will need a 
>> global address
>> for that (and many would want to block that from happening).
>> 
>> *you* may not want it to be Internet-reachable, but sure as eggs the printer
>> manufacturer considers external connectivity an essential and major ease-of-use
>> feature, so good luck with that!
>> 
>> Paul
>> 
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
>> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog