Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 30 Mar 2022 14:45:17 +0200 (CEST)
From:      Ronald Klop <ronald-lists@klop.ws>
To:        Goran Mekic <meka@tilda.center>
Cc:        freebsd-current@freebsd.org, "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
Subject:   Re: DHCPDv6 in non-vnet jail
Message-ID:  <900760441.75.1648644317126@mailrelay>
In-Reply-To: <20220329161105.uw5aigvpazd77we4@tilda.center>
References:  <20220326222957.wuc7xwyiq3bjtlnv@tilda.center> <4772ECB8-6482-4B94-A887-F04EC6272911@lists.zabbadoz.net> <20220329081129.p5xtxlbiyw6klxcl@tilda.center> <1527544025.66.1648548860391@mailrelay> <20220329161105.uw5aigvpazd77we4@tilda.center>

next in thread | previous in thread | raw e-mail | index | archive | help
------=_Part_74_956993994.1648644316049
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Hi,

First. I'm not an IPv6 expert. Got it running at home. Although with SLAAC, not DHCP yet.
Another disclaimer is that I use VNET-jails nowadays.
But I like to try and think along with you.

What surprises me is that your non-vnet jail does not have a LINKLOCAL fe80::: address. These addresses are used for configuration in the local network (AFAIK).
And your routing table does not contain a line like this:
ff02::/16                         ::1                           UGRS        lo0

So how is the ff02:: multicast routed in your network?

But the tcpdump shows that the multicast solicit message is received on the non-vnet dhcp-server so that seems to work:
18:02:51.229813 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
I don't know if the dhcp-server program also sees this request coming in on its interface. Maybe extra logging can help there.

According to https://en.wikipedia.org/wiki/DHCPv6#Example the dhcp-server would reply with a link-local fe80:: address.
"Server replies with an advertise from [fe80::0011:22ff:fe33:5566]:547 to [fe80::aabb:ccff:fedd:eeff]:546."
But your dhcp-server does not have an fe80::.

So I'm wondering how that would work.

More questions than answers. But I hope it helps.

Regards,
Ronald.


 
Van: "Goran Mekic" <meka@tilda.center>
Datum: dinsdag, 29 maart 2022 18:11
Aan: Ronald Klop <ronald-lists@klop.ws>
CC: freebsd-current@freebsd.org, "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
Onderwerp: Re: DHCPDv6 in non-vnet jail
> 
> On Tue, Mar 29, 2022 at 12:14:20PM +0200, Ronald Klop wrote:
> > I think it will help if you share more of your configuration/logs.
> Inside non-vnet jail, this is ifconfig output
> cbsd0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>     description: lagg0
>     ether 58:9c:fc:10:9b:75
>     inet 172.16.0.253 netmask 0xffffffff broadcast 172.16.0.253
>     inet6 fd10:6c79:8ae5:8b91::2 prefixlen 128
>     id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
>     maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
>     root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
>     member: epair1a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 7 priority 128 path cost 2000
>     member: epair5a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 11 priority 128 path cost 2000
>     member: epair4a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 10 priority 128 path cost 2000
>     member: epair3a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 9 priority 128 path cost 2000
>     member: epair2a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 8 priority 128 path cost 2000
>     groups: bridge
>     nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
> 
> There are bunch of other interfaces, but only cbsd0 (bridge interface)
> is set up with ip address.
> 
> 
> netstat -rn
> Routing tables
> 
> Internet:
> Destination        Gateway            Flags     Netif Expire
> 172.16.0.253       link#4             UH        cbsd0
> 
> Internet6:
> Destination                       Gateway                       Flags     Netif Expire
> fd10:6c79:8ae5:8b91::2            link#4                        UHS         lo0
> 
> 
> grep -v '^#' /usr/local/etc/dhcpd6.conf
> 
> default-lease-time 2592000;
> preferred-lifetime 604800;
> option dhcp-renewal-time 3600;
> option dhcp-rebinding-time 7200;
> allow leasequery;
> option dhcp6.name-servers 3ffe:501:ffff:100:200:ff:fe00:3f3e;
> option dhcp6.domain-search "test.example.com","example.com";
> option dhcp6.info-refresh-time 21600;
> dhcpv6-lease-file-name "/var/db/dhcpd6/dhcpd6.leases";
> 
> subnet6 fd10:6c79:8ae5:8b91::/64 {
>   range6 fd10:6c79:8ae5:8b91::/64;
> }
> 
> 
> ls -l /dev
> total 1
> crw-------  1 root  wheel   0x26 Mar 29 17:35 bpf
> lrwxr-xr-x  1 root  wheel      3 Mar 28 09:31 bpf0 -> bpf
> crw-rw-rw-  1 root  wheel   0x4a Mar 26 15:54 crypto
> dr-xr-xr-x  2 root  wheel    512 Mar 29 03:38 fd
> crw-rw-rw-  1 root  wheel   0x2a Mar 29 18:00 null
> crw-rw----  1 root  nsd    0x1a5 Mar 24 23:45 pf
> crw-rw----  1 root  nsd     0x4b Mar 26 15:54 pfil
> dr-xr-xr-x  2 root  wheel    512 Mar 28 09:31 pts
> crw-r--r--  1 root  wheel    0x8 Mar 24 23:45 random
> lrwxr-xr-x  1 root  wheel      4 Mar 28 09:31 stderr -> fd/2
> lrwxr-xr-x  1 root  wheel      4 Mar 28 09:31 stdin -> fd/0
> lrwxr-xr-x  1 root  wheel      4 Mar 28 09:31 stdout -> fd/1
> lrwxr-xr-x  1 root  wheel      6 Mar 28 09:31 urandom -> random
> crw-rw-rw-  1 root  wheel   0x2b Mar 26 15:54 zero
> 
> 
> 
> On the host I have /etc/rtadvd.conf:
> cbsd0:addr="fd10:6c79:8ae5:8b91::":raflags="m"
> 
> 
> On the host ifconfig cbsd0
> cbsd0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
>     description: lagg0
>     ether 58:9c:fc:10:9b:75
>     inet 172.16.0.254 netmask 0xffffff00 broadcast 172.16.0.255
>     inet 172.16.1.254 netmask 0xffffff00 broadcast 172.16.1.255
>     inet 172.16.0.253 netmask 0xffffffff broadcast 172.16.0.253
>     inet6 fe80::5a9c:fcff:fe10:9b75%cbsd0 prefixlen 64 scopeid 0x4
>     inet6 fd10:6c79:8ae5:8b91::1 prefixlen 64
>     inet6 fd10:6c79:8ae5:8b91::2 prefixlen 128
>     id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
>     maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
>     root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
>     member: epair1a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 7 priority 128 path cost 2000
>     member: epair5a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 11 priority 128 path cost 2000
>     member: epair4a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 10 priority 128 path cost 2000
>     member: epair3a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 9 priority 128 path cost 2000
>     member: epair2a flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
>             ifmaxaddr 0 port 8 priority 128 path cost 2000
>     groups: bridge
>     nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
> 
> > Besides you can take a look with tcpdump/wireshark on what happens on different interfaces of your machines to see the traffic flow between client and server.
> Running tcpdump -i cbsd0 ip6 inside the non-vnet:
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on cbsd0, link-type EN10MB (Ethernet), capture size 262144 bytes
> 18:02:29.081325 IP6 fe80::5a9c:fcff:fe10:9b75.10482 > ff12::8384.21027: UDP, length 322
> 18:02:51.229813 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
> 18:02:52.338420 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
> 18:02:54.444709 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
> 18:02:58.449268 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
> 18:02:59.083071 IP6 fe80::5a9c:fcff:fe10:9b75.10482 > ff12::8384.21027: UDP, length 322
> 18:03:06.545104 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
> 18:03:12.355503 IP6 fe80::5a9c:fcff:fe10:9b75.10482 > ff12::8384.21027: UDP, length 322
> 18:03:22.890933 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
> 18:03:29.084154 IP6 fe80::5a9c:fcff:fe10:9b75.10482 > ff12::8384.21027: UDP, length 322
> 18:03:54.837662 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client > ff02::1:2.dhcpv6-server: dhcp6 solicit
> 18:03:59.081342 IP6 fe80::5a9c:fcff:fe10:9b75.10482 > ff12::8384.21027: UDP, length 322
> 18:04:29.083992 IP6 fe80::5a9c:fcff:fe10:9b75.10482 > ff12::8384.21027: UDP, length 322
> 18:04:41.028190 IP6 fe80::5a9c:fcff:fe10:9b75.10482 > ff12::8384.21027: UDP, length 322
> 
> 
> That happens while I'm running dhcp6c -d -f eth0 inside vnet jail (eth0
> is epair that is renamed):
> Mar/29/2022 18:02:50: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
> Mar/29/2022 18:02:50: failed initialize control message authentication
> Mar/29/2022 18:02:50: skip opening control port
> Mar/29/2022 18:02:50: cfparse: fopen(/usr/local/etc/dhcp6c.conf): No such file or directory
> Mar/29/2022 18:02:51: Sending Solicit
> Mar/29/2022 18:02:52: Sending Solicit
> Mar/29/2022 18:02:54: Sending Solicit
> Mar/29/2022 18:02:58: Sending Solicit
> Mar/29/2022 18:03:06: Sending Solicit
> Mar/29/2022 18:03:22: Sending Solicit
> Mar/29/2022 18:03:54: Sending Solicit
> 
> 
> 
> Can I provide any more info?
> 
> Regards,
> meka
> 
> 
> 
>  

------=_Part_74_956993994.1648644316049
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<html><head></head><body>Hi,<br />
<br />
First. I'm not an IPv6 expert. Got it running at home. Although with SLAAC, not DHCP yet.<br />
Another disclaimer is that I use VNET-jails nowadays.<br />
But I like to try and think along with you.<br />
<br />
What surprises me is that your non-vnet jail does not have a LINKLOCAL fe80::: address. These addresses are used for configuration in the local network (AFAIK).<br />
And your routing table does not contain a line like this:<br />
ff02::/16&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ::1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UGRS&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; lo0<br />
<br />
So how is the ff02:: multicast routed in your network?<br />
<br />
But the tcpdump shows that the multicast solicit message is received on the non-vnet dhcp-server so that seems to work:<br />
18:02:51.229813 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client &gt; ff02::1:2.dhcpv6-server: dhcp6 solicit<br />
I don't know if the dhcp-server program also sees this request coming in on its interface. Maybe extra logging can help there.<br />
<br />
According to https://en.wikipedia.org/wiki/DHCPv6#Example the dhcp-server would reply with a link-local fe80:: address.<br />
&quot;Server replies with an <i>advertise</i> from [fe80::0011:22ff:fe33:5566]:547 to [fe80::aabb:ccff:fedd:eeff]:546.&quot;<br />
But your dhcp-server does not have an fe80::.<br />
<br />
So I'm wondering how that would work.<br />
<br />
More questions than answers. But I hope it helps.<br />
<br />
Regards,<br />
Ronald.<br />
<br />
<br />
&nbsp;
<p><strong>Van:</strong> &quot;Goran Mekic&quot; &lt;meka@tilda.center&gt;<br />
<strong>Datum:</strong> dinsdag, 29 maart 2022 18:11<br />
<strong>Aan:</strong> Ronald Klop &lt;ronald-lists@klop.ws&gt;<br />
<strong>CC:</strong> freebsd-current@freebsd.org, &quot;Bjoern A. Zeeb&quot; &lt;bzeeb-lists@lists.zabbadoz.net&gt;<br />
<strong>Onderwerp:</strong> Re: DHCPDv6 in non-vnet jail</p>

<blockquote style="padding-right: 0px; padding-left: 5px; margin-left: 5px; border-left: #000000 2px solid; margin-right: 0px">
<div class="MessageRFC822Viewer" id="P">
<div class="MultipartMixedViewer">
<div class="TextPlainViewer" id="P.P.P1">On Tue, Mar 29, 2022 at 12:14:20PM +0200, Ronald Klop wrote:<br />
&gt; I think it will help if you share more of your configuration/logs.<br />
Inside non-vnet jail, this is ifconfig output<br />
cbsd0: flags=8843&lt;UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST&gt; metric 0 mtu 1500<br />
&nbsp;&nbsp;&nbsp;&nbsp;description: lagg0<br />
&nbsp;&nbsp;&nbsp;&nbsp;ether 58:9c:fc:10:9b:75<br />
&nbsp;&nbsp;&nbsp;&nbsp;inet 172.16.0.253 netmask 0xffffffff broadcast 172.16.0.253<br />
&nbsp;&nbsp;&nbsp;&nbsp;inet6 fd10:6c79:8ae5:8b91::2 prefixlen 128<br />
&nbsp;&nbsp;&nbsp;&nbsp;id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15<br />
&nbsp;&nbsp;&nbsp;&nbsp;maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200<br />
&nbsp;&nbsp;&nbsp;&nbsp;root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair1a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 7 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair5a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 11 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair4a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 10 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair3a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 9 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair2a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 8 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;groups: bridge<br />
&nbsp;&nbsp;&nbsp;&nbsp;nd6 options=21&lt;PERFORMNUD,AUTO_LINKLOCAL&gt;<br />
<br />
There are bunch of other interfaces, but only cbsd0 (bridge interface)<br />
is set up with ip address.<br />
<br />
<br />
netstat -rn<br />
Routing tables<br />
<br />
Internet:<br />
Destination &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Gateway &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Flags &nbsp;&nbsp;&nbsp;&nbsp;Netif Expire<br />
172.16.0.253 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;link#4 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;UH &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;cbsd0<br />
<br />
Internet6:<br />
Destination &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Gateway &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Flags &nbsp;&nbsp;&nbsp;&nbsp;Netif Expire<br />
fd10:6c79:8ae5:8b91::2 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;link#4 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;UHS &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;lo0<br />
<br />
<br />
grep -v '^#' /usr/local/etc/dhcpd6.conf<br />
<br />
default-lease-time 2592000;<br />
preferred-lifetime 604800;<br />
option dhcp-renewal-time 3600;<br />
option dhcp-rebinding-time 7200;<br />
allow leasequery;<br />
option dhcp6.name-servers 3ffe:501:ffff:100:200:ff:fe00:3f3e;<br />
option dhcp6.domain-search &quot;test.example.com&quot;,&quot;example.com&quot;;<br />
option dhcp6.info-refresh-time 21600;<br />
dhcpv6-lease-file-name &quot;/var/db/dhcpd6/dhcpd6.leases&quot;;<br />
<br />
subnet6 fd10:6c79:8ae5:8b91::/64 {<br />
&nbsp;&nbsp;range6 fd10:6c79:8ae5:8b91::/64;<br />
}<br />
<br />
<br />
ls -l /dev<br />
total 1<br />
crw------- &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;0x26 Mar 29 17:35 bpf<br />
lrwxr-xr-x &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;3 Mar 28 09:31 bpf0 -&gt; bpf<br />
crw-rw-rw- &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;0x4a Mar 26 15:54 crypto<br />
dr-xr-xr-x &nbsp;2 root &nbsp;wheel &nbsp;&nbsp;&nbsp;512 Mar 29 03:38 fd<br />
crw-rw-rw- &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;0x2a Mar 29 18:00 null<br />
crw-rw---- &nbsp;1 root &nbsp;nsd &nbsp;&nbsp;&nbsp;0x1a5 Mar 24 23:45 pf<br />
crw-rw---- &nbsp;1 root &nbsp;nsd &nbsp;&nbsp;&nbsp;&nbsp;0x4b Mar 26 15:54 pfil<br />
dr-xr-xr-x &nbsp;2 root &nbsp;wheel &nbsp;&nbsp;&nbsp;512 Mar 28 09:31 pts<br />
crw-r--r-- &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;&nbsp;0x8 Mar 24 23:45 random<br />
lrwxr-xr-x &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;4 Mar 28 09:31 stderr -&gt; fd/2<br />
lrwxr-xr-x &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;4 Mar 28 09:31 stdin -&gt; fd/0<br />
lrwxr-xr-x &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;4 Mar 28 09:31 stdout -&gt; fd/1<br />
lrwxr-xr-x &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;6 Mar 28 09:31 urandom -&gt; random<br />
crw-rw-rw- &nbsp;1 root &nbsp;wheel &nbsp;&nbsp;0x2b Mar 26 15:54 zero<br />
<br />
<br />
<br />
On the host I have /etc/rtadvd.conf:<br />
cbsd0:addr=&quot;fd10:6c79:8ae5:8b91::&quot;:raflags=&quot;m&quot;<br />
<br />
<br />
On the host ifconfig cbsd0<br />
cbsd0: flags=8843&lt;UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST&gt; metric 0 mtu 1500<br />
&nbsp;&nbsp;&nbsp;&nbsp;description: lagg0<br />
&nbsp;&nbsp;&nbsp;&nbsp;ether 58:9c:fc:10:9b:75<br />
&nbsp;&nbsp;&nbsp;&nbsp;inet 172.16.0.254 netmask 0xffffff00 broadcast 172.16.0.255<br />
&nbsp;&nbsp;&nbsp;&nbsp;inet 172.16.1.254 netmask 0xffffff00 broadcast 172.16.1.255<br />
&nbsp;&nbsp;&nbsp;&nbsp;inet 172.16.0.253 netmask 0xffffffff broadcast 172.16.0.253<br />
&nbsp;&nbsp;&nbsp;&nbsp;inet6 fe80::5a9c:fcff:fe10:9b75%cbsd0 prefixlen 64 scopeid 0x4<br />
&nbsp;&nbsp;&nbsp;&nbsp;inet6 fd10:6c79:8ae5:8b91::1 prefixlen 64<br />
&nbsp;&nbsp;&nbsp;&nbsp;inet6 fd10:6c79:8ae5:8b91::2 prefixlen 128<br />
&nbsp;&nbsp;&nbsp;&nbsp;id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15<br />
&nbsp;&nbsp;&nbsp;&nbsp;maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200<br />
&nbsp;&nbsp;&nbsp;&nbsp;root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair1a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 7 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair5a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 11 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair4a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 10 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair3a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 9 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;member: epair2a flags=143&lt;LEARNING,DISCOVER,AUTOEDGE,AUTOPTP&gt;<br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ifmaxaddr 0 port 8 priority 128 path cost 2000<br />
&nbsp;&nbsp;&nbsp;&nbsp;groups: bridge<br />
&nbsp;&nbsp;&nbsp;&nbsp;nd6 options=21&lt;PERFORMNUD,AUTO_LINKLOCAL&gt;<br />
<br />
&gt; Besides you can take a look with tcpdump/wireshark on what happens on different interfaces of your machines to see the traffic flow between client and server.<br />
Running tcpdump -i cbsd0 ip6 inside the non-vnet:<br />
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode<br />
listening on cbsd0, link-type EN10MB (Ethernet), capture size 262144 bytes<br />
18:02:29.081325 IP6 fe80::5a9c:fcff:fe10:9b75.10482 &gt; ff12::8384.21027: UDP, length 322<br />
18:02:51.229813 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client &gt; ff02::1:2.dhcpv6-server: dhcp6 solicit<br />
18:02:52.338420 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client &gt; ff02::1:2.dhcpv6-server: dhcp6 solicit<br />
18:02:54.444709 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client &gt; ff02::1:2.dhcpv6-server: dhcp6 solicit<br />
18:02:58.449268 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client &gt; ff02::1:2.dhcpv6-server: dhcp6 solicit<br />
18:02:59.083071 IP6 fe80::5a9c:fcff:fe10:9b75.10482 &gt; ff12::8384.21027: UDP, length 322<br />
18:03:06.545104 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client &gt; ff02::1:2.dhcpv6-server: dhcp6 solicit<br />
18:03:12.355503 IP6 fe80::5a9c:fcff:fe10:9b75.10482 &gt; ff12::8384.21027: UDP, length 322<br />
18:03:22.890933 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client &gt; ff02::1:2.dhcpv6-server: dhcp6 solicit<br />
18:03:29.084154 IP6 fe80::5a9c:fcff:fe10:9b75.10482 &gt; ff12::8384.21027: UDP, length 322<br />
18:03:54.837662 IP6 fe80::2a0:98ff:fe7d:cad.dhcpv6-client &gt; ff02::1:2.dhcpv6-server: dhcp6 solicit<br />
18:03:59.081342 IP6 fe80::5a9c:fcff:fe10:9b75.10482 &gt; ff12::8384.21027: UDP, length 322<br />
18:04:29.083992 IP6 fe80::5a9c:fcff:fe10:9b75.10482 &gt; ff12::8384.21027: UDP, length 322<br />
18:04:41.028190 IP6 fe80::5a9c:fcff:fe10:9b75.10482 &gt; ff12::8384.21027: UDP, length 322<br />
<br />
<br />
That happens while I'm running dhcp6c -d -f eth0 inside vnet jail (eth0<br />
is epair that is renamed):<br />
Mar/29/2022 18:02:50: failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory<br />
Mar/29/2022 18:02:50: failed initialize control message authentication<br />
Mar/29/2022 18:02:50: skip opening control port<br />
Mar/29/2022 18:02:50: cfparse: fopen(/usr/local/etc/dhcp6c.conf): No such file or directory<br />
Mar/29/2022 18:02:51: Sending Solicit<br />
Mar/29/2022 18:02:52: Sending Solicit<br />
Mar/29/2022 18:02:54: Sending Solicit<br />
Mar/29/2022 18:02:58: Sending Solicit<br />
Mar/29/2022 18:03:06: Sending Solicit<br />
Mar/29/2022 18:03:22: Sending Solicit<br />
Mar/29/2022 18:03:54: Sending Solicit<br />
<br />
<br />
<br />
Can I provide any more info?<br />
<br />
Regards,<br />
meka</div>

<hr />
<div class="DefaultViewer">&nbsp;</div>
</div>
</div>
</blockquote></body></html>
------=_Part_74_956993994.1648644316049--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?900760441.75.1648644317126>