|
|
|
|
|
by bert64
1290 days ago
|
|
Using IP addresses directly is a bad practice in general, it introduced security risks in many scenarios. SSL - usually cannot verify the cert, defeating the point of SSL
SMB - windows will fail over to less secure ntlm auth instead of kerberos If your using IP addresses instead of hostnames to reference machines, you're doing it wrong. Also IPv6 is easier to remember in general... We have a single large IPv6 allocation (eg 2001:db8::/32), and everything sits under that in a logical layout. For legacy IP, we have several different allocations in different class A blocks (104.x, 66.x, 62.x etc) plus all the RFC1918 space used internally |
|