With a command...
R1(config-if)#ipv6 address 2001:5c0:1400:a::331/64 eui-64
...one can configure an address for an interface with EUI-64 part generated from actual MAC address on this interface.
How to make router to generate EUI-64 with random numbers, without revealing actual MAC address and if possible last 64 bits of IPv6-address are randomly changed from time to time ?
Since SLAAC router-advertisement only happens once for many hosts, how do you plan on making this even function?
Run a script periodically which does: (conf-if)# ipv6 address fe80::ran:dom:hex:tets link-local
And you are fine.
Please keep in mind, that this will change the SLAAC adresses while keep the reachablilty of the old ones fow a while.
Don't forget to update your DNS, your firewalls, and all your systems manually configured to use the router IP.
Have something to add? Share your thoughts — no account required.
Ask the community — no account required