From owner-freebsd-net@freebsd.org Fri May 27 05:53:30 2016 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8269BB4C1E8; Fri, 27 May 2016 05:53:30 +0000 (UTC) (envelope-from mark.tinka@seacom.mu) Received: from the-host.seacom.mu (ge-1.ln-01-jnb.za.seacomnet.com [105.28.96.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 227621F38; Fri, 27 May 2016 05:53:29 +0000 (UTC) (envelope-from mark.tinka@seacom.mu) Received: from [127.0.0.1] (helo=Mark-Tinkas-MacBook.local) by the-host.seacom.mu with esmtp (Exim 4.82_1-5b7a7c0-XX) (envelope-from ) id O7TN0T-0003O3-OG; Fri, 27 May 2016 07:53:17 +0200 Subject: Re: IPv6, ULAs and FreeBSD To: tinc@tinc-vpn.org, freebsd-net@freebsd.org, freebsd-questions@freebsd.org References: <20160526193602.GF49239@box-fra-01.niklaas.eu> From: Mark Tinka Message-ID: <016845dd-2c42-5aeb-f65d-02a6fb77acec@seacom.mu> Date: Fri, 27 May 2016 07:53:17 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2 MIME-Version: 1.0 In-Reply-To: <20160526193602.GF49239@box-fra-01.niklaas.eu> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="295T7DuFa0DalPJ4oRE949Xjwnnfl9GUm" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 May 2016 05:53:30 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --295T7DuFa0DalPJ4oRE949Xjwnnfl9GUm Content-Type: multipart/mixed; boundary="W06wNlo2SC21CdDLEvFtBrMShbn6MqeRA" From: Mark Tinka To: tinc@tinc-vpn.org, freebsd-net@freebsd.org, freebsd-questions@freebsd.org Message-ID: <016845dd-2c42-5aeb-f65d-02a6fb77acec@seacom.mu> Subject: Re: IPv6, ULAs and FreeBSD References: <20160526193602.GF49239@box-fra-01.niklaas.eu> In-Reply-To: <20160526193602.GF49239@box-fra-01.niklaas.eu> --W06wNlo2SC21CdDLEvFtBrMShbn6MqeRA Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 26/May/16 21:36, Niklaas Baudet von Gersdorff wrote: > Here lies the first problem. It seems that it's not legitimate to assig= n > /96 subnets when using unique local addresses (ULAs). I was right > getting some /48 subnet for my local IPv6 network; some easy way to get= > one generated randomly is http://unique-local-ipv6.com/ . But instead o= f > assigning /96 subnets to each host, you must assign /64 subnets. I gues= s > (but I am not sure because I have not found any reference that mentions= > this explicitly) you *must not* use any other subnet when dealing with > ULAs. > > So I decided for the following two subnets for machine A and > B respectively: fd16:dcc0:f4cc:1::/64 and fd16:dcc0:f4cc:2::/64. Interesting, I did not know that. I know that if you want SLAAC to work, you need to assign a /64 prefix. We use /112's for hosts but based on GUA's, and that works fine. Mark. --W06wNlo2SC21CdDLEvFtBrMShbn6MqeRA-- --295T7DuFa0DalPJ4oRE949Xjwnnfl9GUm Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJXR+DNAAoJEGcZuYTeKm+GKBYP/0+5uKcj4znpwEJ441oT6xDN OUlP2+L8jthDU6R1J4OYXHeoHl9OtpyZVHodwn1mqeqxvo5saOtXcbYqsRGGKWQS rEF0RPw97ZJW2MmjR+wp7Pv+xiUarlOcg9WouO6QcbsZJm4hcdpD7hOTG5VHYYvv 3E6rnB1DbkQbJoB6p1ESyFDBhFjambZP2jZIVRjHabYRMmrRoiBjEAKfywt3Rv24 R5YTB0Z3FG0rZNSy+iAoeAaUTsS54Z2lvmcXCJQqKWBEmiWG8wV2kDynWf6bXDZ1 eVc81fAGYH5EHwxMDFmGg2fjdmdv7d8Cr9PciigxgMSQhPs1BUN/zMKW32+sGTnH Y6pzdWmjeca67uqeoS3ekmxQZgu/hX65+sqkQ2JQyL2M7dmrYwlcJDOHMTyHIyzS yOtFceBi9w+LCb43WF512oJzE8oaexLYjqH9jkRPBkjyjPlNuhqdrK34pRNmHNN/ 49ILZ4kJjym54thtdTQfb/gltOA8mTSK6kb1TLOjCFypvksQSx4xFcAVGBMNnecd EV0ydzRHWVzCx8KzSxHiJeN1BQk+I0fxIM4XNnF7Bv1sqfN/dLmPSB4yaI/CQkE9 KLMPpwhoEGX8hi1AsHdqnYbLRNED3QeS5/P3yI+A9zNiDbtwohr01ERT4HFAAyGA ebQEvrq3AUvUvqkuj40T =swk0 -----END PGP SIGNATURE----- --295T7DuFa0DalPJ4oRE949Xjwnnfl9GUm--