ipv6 + dhcpv6 + unique local addresses

Ez egy kriptográfiai módszerrel aláírt, MIME formátumban levő üzenet.

--------------ms020708030907070200050307
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Hello!

Is there anyone who has experience with unique local addresses (fc00::/7)=
?

I have experience with radvd and isc dhcp (in ipv6 mode too with the -6=20
flag), I could already configure stateful configuration with global=20
unicast (2000::/3) addresses with working default gateway.

What I am trying to do now is to create a local IPv6 network space with=20
a dhcpv6 server (amd64 gentoo), which is only reachable via VPN. The=20
network does not have any router, it's isolated. IPv4 is not an option,=20
and DHCPv6 is mandatory. The clients are mostly Windows Vista+ systems.=20
What I am seeking is the proper way to do this. I could make it work,=20
but I consider this a hack.

I generated a random IPv6 address range, but I will use the=20
fd00:2001:db8::/64 prefix in the description.

Problem #1:

DHCPv6 works fine, it pushes an IPv6 address to the client, but the=20
client does not get the prefix information with it. Eg.: client gets=20
fd00:2001:db8::ffff:fffe/128 as address, but missing the local route=20
information for fd00:2001:db8::/64 through the interface.

Problem #2:

If I use radvd advertising the fd00:2001:db8::/64 prefix, the client=20
configures that up, but it also configures a bogus default route too,=20
which is definitely unwanted.

Hack #1:

Using dhcp and radvd together actually works (even though it's very=20
ugly). It does not ruin an existing IPv6 connection, and does not cause=20
problems when originally there is none. I just fear it *might*.

Hack #2:

It is possible to create static (even on-link) routes with netsh, but=20
other than being ugly as well, it's not platform independent solution.



What I would require is (if it's somehow possible), to make the=20
platform-independent client do prefix discovery, find the prefix=20
on-link, but do not configure routing information for that link. And to=20
do it the proper way.

Any ideas?


--------------ms020708030907070200050307
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME kriptográfiai aláírás
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--------------ms020708030907070200050307--