Re: ipv6 + dhcpv6 + unique local addresses

Ez egy kriptográfiai módszerrel aláírt, MIME formátumban levő üzenet.

--------------ms050003040707090102050008
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

To answer my own question, actually found the answer:

http://www.ietf.org/rfc/rfc2461.txt

On page 18:

Router Lifetime
                      [...] A
                      Lifetime of 0 indicates that the router is not a
                      default router and SHOULD NOT appear on the default=

                      router list. [...]

So this needs to written in radvd.conf:

AdvDefaultLifetime 0;

Yay.

2013.04.01. 14:01 keltez=C3=A9ssel, Halassy Zolt=C3=A1n =C3=ADrta:
> Hello!
>
> Is there anyone who has experience with unique local addresses (fc00::/=
7)?
>
> I have experience with radvd and isc dhcp (in ipv6 mode too with the -6=

> flag), I could already configure stateful configuration with global
> unicast (2000::/3) addresses with working default gateway.
>
> What I am trying to do now is to create a local IPv6 network space with=

> a dhcpv6 server (amd64 gentoo), which is only reachable via VPN. The
> network does not have any router, it's isolated. IPv4 is not an option,=

> and DHCPv6 is mandatory. The clients are mostly Windows Vista+ systems.=

> What I am seeking is the proper way to do this. I could make it work,
> but I consider this a hack.
>
> I generated a random IPv6 address range, but I will use the
> fd00:2001:db8::/64 prefix in the description.
>
> Problem #1:
>
> DHCPv6 works fine, it pushes an IPv6 address to the client, but the
> client does not get the prefix information with it. Eg.: client gets
> fd00:2001:db8::ffff:fffe/128 as address, but missing the local route
> information for fd00:2001:db8::/64 through the interface.
>
> Problem #2:
>
> If I use radvd advertising the fd00:2001:db8::/64 prefix, the client
> configures that up, but it also configures a bogus default route too,
> which is definitely unwanted.
>
> Hack #1:
>
> Using dhcp and radvd together actually works (even though it's very
> ugly). It does not ruin an existing IPv6 connection, and does not cause=

> problems when originally there is none. I just fear it *might*.
>
> Hack #2:
>
> It is possible to create static (even on-link) routes with netsh, but
> other than being ugly as well, it's not platform independent solution.
>
>
>
> What I would require is (if it's somehow possible), to make the
> platform-independent client do prefix discovery, find the prefix
> on-link, but do not configure routing information for that link. And to=

> do it the proper way.
>
> Any ideas?
>



--------------ms050003040707090102050008
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME kriptográfiai aláírás
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--------------ms050003040707090102050008--