What are some of the security-related decisions you will need to make to deploy IPv6?

Question

What will be an ideal response?

Answer 1

Security-related decisions you will need to make to deploy IPv6:
* Securing network protocols -Most of the routing protocols and protocols used for things such as Neighbor Discovery and Internet Control Message Protocol (ICMP) have options to use relatively robust authentication mechanisms. The advantage to using them is that it requires more skill on behalf of malicious users, therefore malicious activity will be less successful. The disadvantage is that security often complicates things, requiring more skill to configure and troubleshoot problems. Project changes will also be less successful.
Encrypting everything-The idea that all traffic on a network can be encrypted is interesting but not without a few drawbacks. Namely, encryption remains CPU intensive unless it is offloaded to hardware accelerators, and encryption reduces the usability or effectiveness of many tools, such as sniffers.
No perimeter-Your devices have a globally unique address. If your important traffic is encrypted from host to host, do you need a firewall to block the Internet and create a perimeter? It's hard to argue the pro-perimeter case if your organization allows people to use their laptops to work from home or the local coffee shop. One could make the case that the perimeter instead belongs in front of the data center.