On Thu, May 26, 2016 at 6:03 AM, Olivier Mascia <[email protected]> wrote:
> LAN Interface (lan, igb0)
> Status                  up
> MAC Address             00:08:a2:09:58:96
> IPv4 Address            10.32.0.1
> Subnet mask IPv4        255.255.0.0
> IPv6 Link Local         fe80::1:1%igb0  (???)
> IPv6 Address            2a02:578:4d07::1
> Subnet mask IPv6        64
> MTU                     1500
> Media                   1000baseT <full-duplex>
>
> I do not understand where this fe80:1:1 comes from, it clearly isn't derived 
> from the MAC.
>

That's your link-local gateway IP, it exists on every interface that
obtains its IP via PD. It's common to use that as a gateway IP in that
case. It also provides an easy IP to use to hit the GUI.


> Indeed workstations on the LAN capture fe80::1:1 for their default gateway 
> and even pinging that IP from a workstation doesn't work:
>
> ping6 fe80::1:1
> PING6(56=40+8+8 bytes) fe80::aa20:66ff:fe21:7c8e%en2 --> fe80::1:1
> ping6: sendmsg: No route to host

You need an interface scope when pinging link local. For instance on a
Linux host whose connected NIC is wlan0, this is pinging the gateway
IP on a PD-configured interface.

$ ping6 fe80::1:1%wlan0
PING fe80::1:1%wlan0(fe80::1:1) 56 data bytes
64 bytes from fe80::1:1: icmp_seq=1 ttl=64 time=3.01 ms
64 bytes from fe80::1:1: icmp_seq=2 ttl=64 time=3.20 ms
64 bytes from fe80::1:1: icmp_seq=3 ttl=64 time=3.49 ms
^C
--- fe80::1:1%wlan0 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 3.010/3.235/3.493/0.209 ms
$ ip -6 neighbor
fe80::1:1 dev wlan0 lladdr 00:08:a2:09:3b:b4 router REACHABLE

Or on a Mac where en0 is the interface.

$ ping6 fe80::1:1%en0
PING6(56=40+8+8 bytes) fe80::426c:8fff:fe2c:d08%en0 --> fe80::1:1%en0
16 bytes from fe80::1:1%en0, icmp_seq=0 hlim=64 time=0.225 ms
16 bytes from fe80::1:1%en0, icmp_seq=1 hlim=64 time=0.252 ms
^C
--- fe80::1:1%en0 ping6 statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/std-dev = 0.225/0.238/0.252/0.014 ms

$ ndp -an
Neighbor                        Linklayer Address  Netif Expire    St Flgs Prbs
<snip>
fe80::1:1%en0                   0:8:a2:9:3b:b4       en0 7s        R  R


> So I could get rid of it and get there a proper link-local address?
>

There's nothing improper about it, it's fine as-is.
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to