Hi,

> Never use a netmask different then 255.255.255.255 for aliases unless
> they are for different network. This is the only way to get a reliable
> main address.

Will do, somehow I was used to enter netmask/broadcast for any additional
ip address regardless of same subnet or not. Learned something new.

> Unsure about inet6. Their source address selection is so complex
> and stupid that you never know what you get. But I guess you could
> try a prefixlen of 128 for the secondary IPv6 addrs and see if that
> helps.

Does accept prefixlen 128 address, can ping, but still takes the last
configured address as source (the /128). That must be wrong now?!

> What do you think the purpose of 'alias' is in the inet6 context?
> inet6 does not have the concept of aliases, alias is the default
> behaviour.

I 'assumed' that was obviously my problem.

My FortiGate unit (to name just one other equipment that does not
exhibit this behaviour) has the notion of ip6-address in its top
level interface configuration and a sub-section 'ip6-extra-addrs'
for this exact purpose.

A 'prefer' keyword or something like that would be nice.
That would eliminate the ambiguity for good.

Marco

Reply via email to