Re: ipv6 kernel pppoe + slaac problem

2015-07-27 Thread Stuart Henderson
On 2015-07-25, Holger Glaess gla...@glaessixs.de wrote:

 hi

 if i start dhcpcd i got


 dhcpcd[26307]: version 6.4.2 starting
 dhcpcd[26307]: IPV6CTL_ACCEPT_RTADV: Operation not supported
 dhcpcd[26307]: kernel does not report IPv6 address flag changes
 dhcpcd[26307]: polling tentative address flags periodically instead
 dhcpcd[26307]: IPV6CTL_ACCEPT_RTADV: Operation not supported

 it is an current ( 5.8-beta ) system.

 Holger



Can you try 6.9.1 from -current ports please? (I updated it recently
so packages might not be there yet).



Re: ipv6 kernel pppoe + slaac problem

2015-07-27 Thread Giancarlo Razzolini
Em 27-07-2015 18:16, Stuart Henderson escreveu:
 Can you try 6.9.1 from -current ports please? (I updated it recently
 so packages might not be there yet).
You can try using the wide-dhcp6 too. But, I couldn't make it work
because my upstream router would delegate the prefix, but not route the
packets to my OpenBSD firewall. So, some form of NDP proxying is
required. Nothing in the base or in the ports can do that, AFAIK. I
ended up deploying a bridge. I also have the same issue, the prefix
delegation from my ISP is dynamic, not static so, every time my router
gets restarted, I get a new prefix from it. If your prefix delegation
solution doesn't account for it, you might need some form of monitoring
(ifstated comes to mind), to reload both your dhcp and rtadvd.

IIRC, OpenBSD isn't yet RFC 7084 ready (I have my doubts whether it even
should be). One of the core things is, if the router lose global IPv6
connectivity, it MUST stop advertising itself as a IPv6 router. And
rtadvd doesn't do that yet AFAIK. Truth is, most ISP's are ing up
IPv6 deployment. Some of them are doing it for the money (charging more
for something that should be default, as static PD). Others are doing it
because of plain and simple lack of knowledge.

Cheers,
Giancarlo Razzolini



Re: ipv6 kernel pppoe + slaac problem

2015-07-25 Thread Holger Glaess

Am 25.07.2015 um 16:35 schrieb Stuart Henderson:

On 2015-07-25, Holger Glaess gla...@glaessixs.de wrote:

# ifconfig pppoe0
pppoe0: flags=208851UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST,AUTOCONF6
mtu 1492
  priority: 0
  dev: em2 state: session
  sid: 0x508f PADI retries: 16 PADR retries: 0 time: 01:28:15
  sppp: phase network authproto pap authname
nc-glaesz...@netcologne.de
  groups: pppoe egress
  status: active
  inet6 fe80::214:b7ff:fe00:6163%pppoe0 -  prefixlen 64 scopeid 0xb
  inet 84.44.157.221 -- 195.14.226.82 netmask 0x
  inet6 2001:4dd0:af10:d604:214:b7ff:fe00:6163 - prefixlen 64
autoconf pltime 604786 vltime 2591986
  inet6 2001:4dd0:af10:d604:747a:f5e2:c201:b278 - prefixlen 64
autoconf autoconfprivacy pltime 80714 vltime 599505

So you are showing that you are receiving the SLAAC address here.


so if i start the rtadvd -d em0 without counfg  i see that he receive
the RA from ppoe but he dont deploy
the offered /64 network,

The offered /64 is on the pppoe interface. This seems to all be working
exactly as expected.

As you're trying to request a /64 for use on a different interface than
the one you're sending the request from, you'll need a different mechanism,
normally DHCPv6 Prefix Delegation (PD) is used for that.

There's nothing in base that handles DHCPv6 PD, but a couple of packages
do support it. The ISP I currently use for v6 only does static config so
I can't test this, however if you pkg_add dhcpcd, you can try
something like this in /etc/dhcpcd.conf:

-- -- -- -- --
ipv6only
duid
persistent
option rapid_commit
slaac private
nohook lookup-hostname

interface pppoe0
   ipv6rs
   ia_na 1
   ia_pd 2
-- -- -- -- --

dhcpcd -d -B will run it in the foreground with debug messages.



hi

if i start dhcpcd i got


dhcpcd[26307]: version 6.4.2 starting
dhcpcd[26307]: IPV6CTL_ACCEPT_RTADV: Operation not supported
dhcpcd[26307]: kernel does not report IPv6 address flag changes
dhcpcd[26307]: polling tentative address flags periodically instead
dhcpcd[26307]: IPV6CTL_ACCEPT_RTADV: Operation not supported

it is an current ( 5.8-beta ) system.

Holger



Re: ipv6 kernel pppoe + slaac problem

2015-07-25 Thread Stuart Henderson
On 2015-07-25, Holger Glaess gla...@glaessixs.de wrote:
 # ifconfig pppoe0
 pppoe0: flags=208851UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST,AUTOCONF6 
 mtu 1492
  priority: 0
  dev: em2 state: session
  sid: 0x508f PADI retries: 16 PADR retries: 0 time: 01:28:15
  sppp: phase network authproto pap authname 
 nc-glaesz...@netcologne.de
  groups: pppoe egress
  status: active
  inet6 fe80::214:b7ff:fe00:6163%pppoe0 -  prefixlen 64 scopeid 0xb
  inet 84.44.157.221 -- 195.14.226.82 netmask 0x
  inet6 2001:4dd0:af10:d604:214:b7ff:fe00:6163 - prefixlen 64 
 autoconf pltime 604786 vltime 2591986
  inet6 2001:4dd0:af10:d604:747a:f5e2:c201:b278 - prefixlen 64 
 autoconf autoconfprivacy pltime 80714 vltime 599505

So you are showing that you are receiving the SLAAC address here.

 so if i start the rtadvd -d em0 without counfg  i see that he receive 
 the RA from ppoe but he dont deploy
 the offered /64 network,

The offered /64 is on the pppoe interface. This seems to all be working
exactly as expected.

As you're trying to request a /64 for use on a different interface than
the one you're sending the request from, you'll need a different mechanism,
normally DHCPv6 Prefix Delegation (PD) is used for that.

There's nothing in base that handles DHCPv6 PD, but a couple of packages
do support it. The ISP I currently use for v6 only does static config so
I can't test this, however if you pkg_add dhcpcd, you can try
something like this in /etc/dhcpcd.conf:

-- -- -- -- --
ipv6only
duid
persistent
option rapid_commit
slaac private
nohook lookup-hostname

interface pppoe0
  ipv6rs
  ia_na 1
  ia_pd 2
-- -- -- -- --

dhcpcd -d -B will run it in the foreground with debug messages.



ipv6 kernel pppoe + slaac problem

2015-07-25 Thread Holger Glaess

hi

i allready read the threads here in this list because my problem is 
similar but

not the the same.

the environment.

dsl provider in germany NetCologne they offer an full working /64 ipv6 
net through slaac config.



i use an openbsd 5.8 beta 8 build a couple of day before )

physical interface are intel em

net.inet6.ip6.forwarding = 1
net.inet6.icmp6.nd6_debug=1



# cat /etc/hostname.em2
inet 192.168.0.2 255.255.255.252 NONE
up

# cat /etc/hostname.em0
inet 192.168.131.251 255.255.255.0 NONE
inet6 autoconf

!echo setup ipv4 on NetCologene pppoe
inet 0.0.0.0 255.255.255.255 NONE \
pppoedev em2 authproto pap authname 'nc-y...@netcologne.de' authkey 
'' up

dest 0.0.0.1
!echo setup ipv6 on NetCologne pppoe
inet6 autoconf
!/sbin/route add -inet default -ifp pppoe0 0.0.0.1
!/sbin/route add -inet6 default -ifp pppoe0 ::0.0.0.1


# ifconfig pppoe0
pppoe0: flags=208851UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST,AUTOCONF6 
mtu 1492

priority: 0
dev: em2 state: session
sid: 0x508f PADI retries: 16 PADR retries: 0 time: 01:28:15
sppp: phase network authproto pap authname 
nc-glaesz...@netcologne.de

groups: pppoe egress
status: active
inet6 fe80::214:b7ff:fe00:6163%pppoe0 -  prefixlen 64 scopeid 0xb
inet 84.44.157.221 -- 195.14.226.82 netmask 0x
inet6 2001:4dd0:af10:d604:214:b7ff:fe00:6163 - prefixlen 64 
autoconf pltime 604786 vltime 2591986
inet6 2001:4dd0:af10:d604:747a:f5e2:c201:b278 - prefixlen 64 
autoconf autoconfprivacy pltime 80714 vltime 599505


# route -n show
Routing tables

Internet:
DestinationGatewayFlags   Refs  Use   Mtu Prio Iface
default195.14.226.82  UGS1 2046 - 8 pppoe0
84.44.157.221  84.44.157.221  UHl00 - 1 lo0
127/8  127.0.0.1  UGRS   00 32768 8 lo0
127.0.0.1  127.0.0.1  UHl10 32768 1 lo0
192.168.0.0/30 192.168.0.2UC 00 - 8 em2
192.168.0.200:14:b7:00:61:66  UHLl   00 - 1 lo0
192.168.0.3192.168.0.2UHb00 - 1 em2
192.168.131/24 192.168.131.251UC 20 - 8 em0
192.168.131.101e8:03:9a:b4:f6:48  UHLc   2  767 - 8 em0
192.168.131.10300:1d:7d:02:5a:e4  UHLc   00 - 8 em0
192.168.131.25100:14:b7:00:61:63  HLl00 - 1 lo0
192.168.131.255192.168.131.251UHb00 - 1 em0
195.14.226.82  84.44.157.221  UH 00 - 8 pppoe0
224/4  127.0.0.1  URS00 32768 8 lo0

Internet6:
DestinationGateway Flags   Refs  Use   Mtu  
Prio Iface
::/104 ::1 UGRS   00 32768 8 
lo0
::/96  ::1 UGRS   00 32768 8 
lo0
default::1 UGS0   12 - 8 
pppoe0
defaultfe80::90:1a00:41a4:ecb0%pppoe0 
UG 00 -56 pppoe0
::1::1 UHl   150 32768 1 
lo0
::127.0.0.0/104::1 UGRS   00 32768 8 
lo0
::224.0.0.0/100::1 UGRS   00 32768 8 
lo0
::255.0.0.0/104::1 UGRS   00 32768 8 
lo0
:::0.0.0.0/96  ::1 UGRS   00 32768 8 
lo0
2001:4dd0:af10:d604:214:b7ff:fe00:6163 
2001:4dd0:af10:d604:214:b7ff:fe00:6163 UHl00 - 1 lo0
2001:4dd0:af10:d604:747a:f5e2:c201:b278 
2001:4dd0:af10:d604:747a:f5e2:c201:b278 UHl00 - 1 lo0
2002::/24  ::1 UGRS   00 32768 8 
lo0
2002:7f00::/24 ::1 UGRS   00 32768 8 
lo0
2002:e000::/20 ::1 UGRS   00 32768 8 
lo0
2002:ff00::/24 ::1 UGRS   00 32768 8 
lo0
fe80::/10  ::1 UGRS   00 32768 8 
lo0
fe80::%em0/64  fe80::214:b7ff:fe00:6163%em0 
UC 10 - 4 em0
fe80::214:b7ff:fe00:6163%em0   00:14:b7:00:61:63 HLl0
0 - 1 lo0
fe80::ea03:9aff:feb4:f648%em0  e8:03:9a:b4:f6:48 UHLc   0   
40 - 4 em0
fe80::%lo0/64  fe80::1%lo0 U  00 
32768 4 lo0
fe80::1%lo0fe80::1%lo0 UHl00 
32768 1 lo0
fe80::%pppoe0/64   fe80::214:b7ff:fe00:6163%pppoe0 
U  00 - 4 pppoe0
fe80::90:1a00:41a4:ecb0%pppoe0 pppoe0 UHL10 
- 4 pppoe0
fe80::214:b7ff:fe00:6163%pppoe0fe80::214:b7ff:fe00:6163%pppoe0 
Hl 00 - 1 lo0
fec0::/10  ::1 UGRS   00 32768 8