IPv6 128 bits -> 4.3 undecillion addresses still has [[subnet]]ting, but easier? during normal startup, host will receive link-local address before actual routable one security¶ more IP address space -> no NAT, harder to scan no ARP so no ARP spoofing