[cifs-protocol] MS-ADTS 6.1.1.2.2.2.1 Subnet Object address range

Douglas Bagnall douglas.bagnall at catalyst.net.nz
Wed Oct 28 21:48:03 UTC 2015


hi dochelp,

I just wish to clarify my interpretation of MS-ADTS 6.1.1.2.2.2.1
(v20150630).

According to that document (and a small amount of testing against
Windows 2012), a subnet IP range can't start with a leading zero. But
with IPv6 it is possible create subnets with implicit leading zeros.
For example, "::ff00/120" and "0::ff00/120" refer to the same address
range, but only the latter is forbidden. (right?)

Can I thus infer that no attempt is made to canonicalise an IPv6
subnet name, and collisions are only avoided by DN uniqueness? That
is, could I simultaneously have subnets called "2001:DA8::/48" and
"2001:DA8:0::/48" which evaluate to the same address range?

Also (as I understand point 6) it says the address part of an IPv4
CIDR can't exactly equal the implied mask. For example,
"255.128.0.0/9" is not allowed because the "/9" implies a mask of
"255.128.0.0". Just for clarity can you confirm that there is no
analogous constraint on IPv6?

thanks

Douglas



More information about the cifs-protocol mailing list