Hi, Andrew, On 04/26/2013 12:43 AM, Andrew McGregor wrote: > Further to that, ifindexes of tunnels and PPP sessions can change > dynamically as the bearer connection goes up and down, Would we be doing SLAAC for these? > even if the > interface has the same name and authenticated identity. That raises the > interesting question of whether even the interface name is stable, as on > many systems it is pure chance if the same name-identity mapping repeats > itself. So... how would you set up e.g. firewall rules for those systems? (not to mention configuration of daemoss such as rtadvd and others...) Thanks, -- Fernando Gont SI6 Networks e-mail: fgont@xxxxxxxxxxxxxxx PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492