Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 26 Apr 2022 03:42:20 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 263288] IPv6 system not responding to Neighbor Solicitation
Message-ID:  <bug-263288-7501-tIEPBcZpX9@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-263288-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-263288-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263288

--- Comment #18 from Zhenlei Huang <zlei.huang@gmail.com> ---
(In reply to wcarson.bugzilla from comment #17)

> To be perfectly clear: 2600:3c00::/64 is shared insofar as other customer=
s have VMs
> with IPv6 addresses on the same IPv6 subnet. Your SLAAC-assigned IPv6 add=
ress -
> 2600:3c00::f03c:91ff:feb0:a56f - is a /128 range, which essentially makes=
 it a
> single IPv6 address which only your VM can use.

If other customers do NOT send spoofed NS packets, or your provider has mea=
ns
to prevent spoofed NS packets, then it is safe to turn on
'net.inet6.icmp6.nd6_onlink_ns_rfc4861'.=20

> The addresses within your /64 range - 2600:3c00:e000:0137::/64 - can only=
 be used
> by the VM it's routed towards.

Since your provider provided routed /64 block, the upstream router should h=
ave
route to this /64 block, then the SLAAC-assigned IPv6 address
2600:3c00::f03c:91ff:feb0:a56f is not required, and you can use
2600:3c00:e000:0137::/64 directly. You can keep 'nd6_onlink_ns_rfc4861'
untouched and try this:

# ping6 -S 2600:3c00:e000:0137:cafe:8a2e:0370:7334 ipv6.google.com

or disable SLAAC:

# service rtsold stop
# ifconfig em0 inet6 -accept_rtadv
# ifconfig em0 inet6 2600:3c00::f03c:91ff:feb0:a56f delete
# route -6 get default || route -6 add default fe80::1%em0
# ping6 ipv6.google.com

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-263288-7501-tIEPBcZpX9>