I have a guest VLAN with both IPv4 and IPv6 (a normal configuration for IPv6, I assume). My 6248 lets me add IP addresses and routing for IPv4 and IPv6. It seems that no matter what I do I cannot get the VLAN locked down properly. I created an IP(v4) access-list to restrict this Guest VLAN from accessing my internal network (except DNS). I created at an IPv6 access-list that does the same thing but on the IPv6 level. I cannot apply them both to the same VLAN. So it seems that my guests can get into resources they don't belong getting into from either IPv4 or IPv6 depending on which ACL I apply. Isn't there a way to set it up so I can still have IPv6 and not have it be a back-door hole to my security?
↧