Sebastian Freundt wrote:
James Knott
writes: Lew Wolfgang wrote:
Yes, this is the case. The network infrastructure requires that any device touching the network be pre-registered, with enforcement implemented with the MAC address. If your MAC isn't registered you get placed into an isolated "rogue" VLAN.
Regardless of how the IPv6 address is configured, the MAC address doesn't change and is included in every packet sent from a host. Compare this with IPv4, where there's no mapping between IP& MAC addresses, unless specifically configured. So, if they're filtering on MAC address, then this shouldn't be an issue. I get the impression this may be caused by someone trying a bit to hard to control everything and not understanding the implications.
So, what am *I* (the user of a network) expected to do about it? Teach the network admins how they could have done it? I don't think you see the point, your Windows 7 example is the perfect counterexample. Windows 7 EXACTLY knows how to deal with this, automagically. It sets up both addresses, prefers the one obtained using privacy extensions, then, after a while when it notices there's no incoming global traffic, it falls back to the link local address.
So the question here is, how to mimic that behaviour in 12.1, and *not* how to be an extra-smart egghead? The former will grant you access, the latter probably won't.
Sebastian
I have a computer here with both openSUSE 12.1 and Windows 7 on it. Both provide a MAC based address and a random number based address, in addition to the link local address. So, in this respect, they behave the same. While it may be possible to change the configuration for either, to provide only a MAC based address, by default, both Linux and Windows provide both. So, yes, you talk to the network admins about this because their overly restrictive policy will cause problems because multiple IPv6 addresses are to be expected. By all means, filter on a MAC, but don't try to limit which address, provided it's valid for the subnet(s)*, is used. Those admins have to realize that every IPv6 device will have a minimum of 2 addresses and will often have 3 or more. If they don't understand that, they are incompetent. *It is entirely possible for a computer to be on multiple subnets with IPv6. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org