From owner-freebsd-stable@freebsd.org Tue Sep 5 10:55:09 2017 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3A4A4E027A0 for ; Tue, 5 Sep 2017 10:55:09 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from forward103j.mail.yandex.net (forward103j.mail.yandex.net [IPv6:2a02:6b8:0:801:2::106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "forwards.mail.yandex.net", Issuer "Yandex CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D175171CDB for ; Tue, 5 Sep 2017 10:55:08 +0000 (UTC) (envelope-from bu7cher@yandex.ru) Received: from mxback13g.mail.yandex.net (mxback13g.mail.yandex.net [IPv6:2a02:6b8:0:1472:2741:0:8b7:92]) by forward103j.mail.yandex.net (Yandex) with ESMTP id CBA3034C1697; Tue, 5 Sep 2017 13:55:02 +0300 (MSK) Received: from smtp1o.mail.yandex.net (smtp1o.mail.yandex.net [2a02:6b8:0:1a2d::25]) by mxback13g.mail.yandex.net (nwsmtp/Yandex) with ESMTP id 79Lh38TiHi-t2vefnQW; Tue, 05 Sep 2017 13:55:02 +0300 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1504608902; bh=ViccMTSKbuG/ZS8VRlwo84Q763ti8JoTyoOANONQKKw=; h=Subject:To:References:From:Message-ID:Date:In-Reply-To; b=CFjU7hPSetP13NMrK1v7Bs4d9QCVt91Xvw+IcvrYHF7kpkf5NLgcq0NsszVjF9pfG FMTzh5j9Ifyct66pRL6hUA+O/BB8YHTjSpjyaRt6qv+d0hvHalOnX/lt6NmZgR8B2z R1QSQX07EUtKJNLI/xHeFWpyB0jeeQP5Z8HKRTCY= Received: by smtp1o.mail.yandex.net (nwsmtp/Yandex) with ESMTPSA id UciAmKzhBJ-t1eqLh9D; Tue, 05 Sep 2017 13:55:02 +0300 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client certificate not present) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yandex.ru; s=mail; t=1504608902; bh=ViccMTSKbuG/ZS8VRlwo84Q763ti8JoTyoOANONQKKw=; h=Subject:To:References:From:Message-ID:Date:In-Reply-To; b=CFjU7hPSetP13NMrK1v7Bs4d9QCVt91Xvw+IcvrYHF7kpkf5NLgcq0NsszVjF9pfG FMTzh5j9Ifyct66pRL6hUA+O/BB8YHTjSpjyaRt6qv+d0hvHalOnX/lt6NmZgR8B2z R1QSQX07EUtKJNLI/xHeFWpyB0jeeQP5Z8HKRTCY= Authentication-Results: smtp1o.mail.yandex.net; dkim=pass header.i=@yandex.ru Subject: Re: SLAAC not working To: Greg Rivers , freebsd-stable@freebsd.org References: <1646645.UkMcyRZBVl@flake.tharned.org> <3078071.oYt2PD7K2Q@flake.tharned.org> <16545541.lkKC6IFVDn@flake.tharned.org> From: "Andrey V. Elsukov" Openpgp: id=E6591E1B41DA1516F0C9BC0001C5EA0410C8A17A Message-ID: <37bf1f27-0cdd-b5a9-7345-d16eb228c4cb@yandex.ru> Date: Tue, 5 Sep 2017 13:51:32 +0300 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 In-Reply-To: <16545541.lkKC6IFVDn@flake.tharned.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="WnBkXtkm3BXLpF4gAqPHekiFLTfW4f9is" X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Sep 2017 10:55:09 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --WnBkXtkm3BXLpF4gAqPHekiFLTfW4f9is Content-Type: multipart/mixed; boundary="C109CfQVE3TMPM0Qhj6uGhAq2G50nVmAx"; protected-headers="v1" From: "Andrey V. Elsukov" To: Greg Rivers , freebsd-stable@freebsd.org Message-ID: <37bf1f27-0cdd-b5a9-7345-d16eb228c4cb@yandex.ru> Subject: Re: SLAAC not working References: <1646645.UkMcyRZBVl@flake.tharned.org> <3078071.oYt2PD7K2Q@flake.tharned.org> <16545541.lkKC6IFVDn@flake.tharned.org> In-Reply-To: <16545541.lkKC6IFVDn@flake.tharned.org> --C109CfQVE3TMPM0Qhj6uGhAq2G50nVmAx Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 05.09.2017 00:20, Greg Rivers wrote: > Thanks. Trying your same experiment, I do get output for duplicate dete= ction, though it doesn't include the interface identifier or a check for = the auto generated link-local address (maybe you're running -CURRENT?): Yes, it is CURRENT, but auto generated address is there because lagg0 did not have enabled IPv6 at beginning of test. > # ifconfig lagg0 inet6 fe80::8/64 > # ifconfig lagg0 inet6 fe80::8/64 delete > # dmesg | tail -2 > lagg0: starting DAD for fe80:c::8 > lagg0: DAD complete for fe80:c::8 - no duplicates found >=20 > What puzzles me is that there are two Cisco routers on this network tha= t each send RAs every ~10 minutes, yet nothing is ever logged on the host= , and the RAs, which should trigger address auto-configuration, are compl= etely ignored. You can try to use dtrace to detect that RA is received by IPv6 stack. # kldload dtraceall # dtrace -n 'fbt::nd6_ra_input:entry {m =3D (struct mbuf *)arg0; ip6 =3D= (struct ip6_hdr *)m->m_data; printf("RA from %s received on %s", inet_ntoa6(&ip6->ip6_src), stringof(m->m_pkthdr.rcvif->if_xname));}' It should produce the output like this: dtrace: description 'fbt::nd6_ra_input:entry ' matched 1 probe CPU ID FUNCTION:NAME 2 37912 nd6_ra_input:entry RA from fe80:1::92e2:baff:fe6a:c7c received on ix0 2 37912 nd6_ra_input:entry RA from fe80:1::92e2:baff:fe6a:c7c received on ix0 > $ ping6 fe80:XXXX:XXXX:4013:23::2%lagg0 > ping6: UDP connect: Network is unreachable Hmm. Can you show the second word of address in this example? Is it not zero? I.e. fe80:XXXX: is correct or you missed '::' part? --=20 WBR, Andrey V. Elsukov --C109CfQVE3TMPM0Qhj6uGhAq2G50nVmAx-- --WnBkXtkm3BXLpF4gAqPHekiFLTfW4f9is Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEzBAEBCAAdFiEE5lkeG0HaFRbwybwAAcXqBBDIoXoFAlmugbQACgkQAcXqBBDI oXpeGQgAo3bx7JDUJiCUrXjLocLqOIeo5OiFkMxUpDTY6iAt0Xw41I/K14/LVURO r+fG3MBnib4NY8SbkkzaOLC8mFF8bVzOWEO52cLFkxFmE+9931oltLjzABFpC+CJ 6D4AuqA6Ziy1oqDP4520N3MIA8PXH2FNUAK326loTwlqcMmAGbCzJYP8Zr2hi2na ow33Y9Cta7bkXSE6IlMfLC5Cyp1S6yGd5Dr/arTKUcvKR8caNuvWnyj54lYRM4kg ZB0gxcTAnssPGZ9JeKJvUjIXEd/il+pyk4isz02MelqQ5rkUbGqqpv2sDYD+YRRn zOr5elhOs5SjDPkupCJezVWuvu9Hrg== =AIKX -----END PGP SIGNATURE----- --WnBkXtkm3BXLpF4gAqPHekiFLTfW4f9is--