6.  SECURITY CONSIDERATIONS

Stateless address autoconfiguration allows a host to connect to a network, configure an address and start communicating with other nodes without ever registering or authenticating itself with the local site.  Although this allows unauthorized users to connect to and use a network, the threat is inherently present in the Internet   architecture. Any node with a physical attachment to a network can generate an address that provides connectivity.
The use of Duplicate Address Detection opens up the possibility of denial of service attacks. Any node can respond to Neighbor Solicitations for a tentative address, causing the other node to reject the address as a duplicate.

Back to Contents