To keep the peering LAN stable, every port must follow these rules. Ports that break them may be shut down without notice.
- One MAC address per port. Only the MAC address of your router interface may appear on the LAN.
- Allowed frame types: IPv4 (0x0800), ARP (0x0806) and IPv6 (0x86dd) only.
- No link-local protocols other than ARP and IPv6 neighbour discovery: no CDP, LLDP, STP/BPDU, VTP, DTP, LACP (unless agreed), OSPF, IS-IS, IGMP/MLD, mDNS, DHCP or router advertisements.
- Unicast only, apart from ARP and IPv6 neighbour discovery. No broadcast or multicast traffic.
- Use only the addresses assigned to you, with the prefix lengths of the peering LAN. Disable proxy-ARP and IPv6 autoconfiguration on the interface.
- No default routes or third-party next hops. Do not point traffic at another member without a BGP session and their agreement.
- Do not announce the peering LAN prefixes (172.20.0.0/22, 2602:fa86:ffe::/64) to any other network.
- Allow ICMP / ICMPv6 echo from
172.20.0.2/2602:fa86:ffe::2for monitoring.
Transit: selling transit over the NeverIX fabric is allowed, as long as it does not affect other members. Full rules: Acceptable Use Policy.
Questions: noc@neverix.net