[AusNOG] IPv6 - What Should an Engineer Address when 'Selling' IPv6 to Executives?

[Don Gould]

On 6/03/2013 2:25 p.m., Mark Newton wrote:
> So did I.
>
> Worked fine.
>
> Proof by demonstration should have pretty definitively ended any
> arguments about this, right?

Mark my guess here is that the major difference between me and you is 
your superior understanding of v4 over mine and your general technical 
ability.

Please don't get me wrong here folks.  This is not a 'Marks dick is just 
bigger than mine' debate. [1]

We're trying to understand why SMB are being so slow to pull finger.

I think that there's whole bunch of us in the SMB space who have bigger 
egos than technical skill.

I also think that a bunch of us have under stated just how complex our 
IT systems are - Google WINZ Security, Novopay, the list goes on just in 
my back yard.

I have to confess that confidence is another big issue for me, how about 
you guys?

I put my tunnel in and backed it right back out the second it occurred 
to me that I didn't understand the security implications of having a 
public IP all the way to every device in my network.

I keep reading postings about the need to have more in your firewall 
that just NAT as protection.  But the minute I talked to anyone about v6 
security it was 'oh, pffft... established and related, icmpv6 allow and 
drop the rest'.  Which is it?  Do I just ignore all those folk telling 
me I should be doing much more to secure stuff... who do I trust?

How many of your other SMB guys are not confident about this stuff and 
scared you might be opening your customers up to a world of hurt if you 
give them a public facing IP address?

D


[1] I do hope I didn't offend to many.




-- 
Don Gould
31 Acheson Ave
Mairehau
Christchurch, New Zealand
Ph: + 64 3 348 7235
Mobile: + 64 21 114 0699