SEND: SLAAC protection

• Router Advertisement IP address can be spoofed

• RA IP is unknown => CGA can not be used

• Routers ARE authorised to act as routers

• Routers MAY be authorised to advertise prefixes

• Routers are given certificates from a trust anchor

• The hosts are configured with trust anchor(s)