Change Details

Currently most hosts have both an explicit, static IPv6 address used in DNS, as well as an autoconfigured one based on router advertisments and the local mac address. Occasionally, depending on the phase of the moon, a host's current address configuration will end up in a state where the autoconfigured address takes precendence for outbound traffic, which has caused us all sorts of headaches in the past with e.g. firewall rules and other things that rely on correct IPv6 addressing or correct v6 reverse lookups. With #Interdatacenter-IPsec , the issue becomes more critical as there wouldn't be any configured IKE security association for the macaddr-based autoconfigured addresses, causing traffic to be sent unencrypted.