From owner-freebsd-net@FreeBSD.ORG Tue Mar 1 07:52:38 2011 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 26398106566C for ; Tue, 1 Mar 2011 07:52:38 +0000 (UTC) (envelope-from pluknet@gmail.com) Received: from mail-qw0-f54.google.com (mail-qw0-f54.google.com [209.85.216.54]) by mx1.freebsd.org (Postfix) with ESMTP id CE6618FC08 for ; Tue, 1 Mar 2011 07:52:35 +0000 (UTC) Received: by qwj8 with SMTP id 8so3743828qwj.13 for ; Mon, 28 Feb 2011 23:52:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=eWUVjhojiIMIqT+lQiIWY7c7cM/39TDMKFIJi5zpauo=; b=EdyevkRAwWLZ56SNVNU+R7Jke5xxGe5y2BMOAhY6nQRry0V5GLjhpyilSvjcSLsDp1 uMUJM1aXnwLZoB00U7I9t85DcGNysl1KzB42KlyksplX35lKlGut020pVlSSV7xt9Nc6 R8ALnndGbO/bU4SUKVt9MtipoP3csMCBG/FTU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=hssHpKL+rOHP0fz8ZwcO9fzOe42tKpM9/dSuRdlVo5j44tiG1a3YUOhtimJTWbipYV cK7WkM0LeWIZ/AVt/YvbX3LH1Ky25421uoSIY1ii5IjlXSBotZjzSbFqljH14InTL4/G //Gg2an0wqbGY+zCyieknrq//iqeUkNBWtXz8= MIME-Version: 1.0 Received: by 10.229.81.138 with SMTP id x10mr5062249qck.20.1298965954504; Mon, 28 Feb 2011 23:52:34 -0800 (PST) Received: by 10.229.84.129 with HTTP; Mon, 28 Feb 2011 23:52:34 -0800 (PST) In-Reply-To: <201102282328.p1SNSQQ7020266@minuit.zyni.com> References: <201102282328.p1SNSQQ7020266@minuit.zyni.com> Date: Tue, 1 Mar 2011 10:52:34 +0300 Message-ID: From: Sergey Kandaurov To: User Red35 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-net@freebsd.org Subject: Re: rtadvd and carp X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2011 07:52:38 -0000 On 1 March 2011 02:28, User Red35 wrote: > > I am getting started with IPv6 and I am trying to get rtadvd working on > the carp interface but it is not working so far. > > > ### I have carp failover between two firewalls. =A0The default gateway fo= r > ### =A0 =A0hosts internal to the firewall is 172.31.98.103 for IPv4 > ### =A0 =A0and 2001:470:dead:98::103 for IPv6 > > =A0 =A0# ifconfig carp1 > =A0 =A0carp1: flags=3D49 metric 0 mtu 1500 > =A0 =A0 =A0 =A0 =A0 =A0inet 172.31.98.103 netmask 0xffffffff > =A0 =A0 =A0 =A0 =A0 =A0inet6 2001:470:dead:98::103 prefixlen 64 > =A0 =A0 =A0 =A0 =A0 =A0nd6 options=3D3 > =A0 =A0 =A0 =A0 =A0 =A0carp: MASTER vhid 1 advbase 1 advskew 60 > =A0 =A0# > > > ### rtadvd does not work since carp1 does not have a link local address > > > =A0 =A0# rtadvd -f -D carp1 > =A0 =A0rtadvd[13262]: link-layer address option has null le= ngth on carp1. =A0Treat as not included. > =A0 =A0rtadvd[13262]: RA timer on carp1 is set to 16:0 > =A0 =A0rtadvd[13262]: IPV6_JOIN_GROUP(link) on carp1: Can't a= ssign requested address > =A0 =A0# > > > ### Per RFC 4861 Router advertisements are supposed to use > ### =A0 =A0 link-local addresses... =A0carp does not have one. > > > =A0 =A0##################################################################= ######### > =A0 =A0### http://tools.ietf.org/html/rfc4861#page-39 > =A0 =A0##################################################################= ######### > > =A0 =A0 =A0 =A0Section 6.1.2 > > =A0 =A0 =A0 =A0 =A0 =A0IP Source Address is a link-local address. =A0Rout= ers must use > =A0 =A0 =A0 =A0 =A0 =A0their link-local address as the source for Router = Advertisement > =A0 =A0 =A0 =A0 =A0 =A0and Redirect messages so that hosts can uniquely i= dentify > =A0 =A0 =A0 =A0 =A0 =A0routers. > > =A0 =A0##################################################################= ######### > > > Is it possible to manually add the link-local address to a carp interface > via ifconfig (or other utility)? > > I assume given the carp MAC 00:00:5e:00:01:01 the link-local address woul= d > look like this? > > fe80::200:5eff:fe00:101 > > Has anyone got anything similar working? > I'm afraid you need to specify carpdev for the carp interface to manage this work. As far as I know, FreeBSD doesn't support carpdev (yet). --=20 wbr, pluknet