[opensuse] Does openSUSE store IPv6 addresses somewhere?
I just set up a 2nd IPv6 subnet for my guest WiFi. While my openSuSE 13.1 based router provides the correct router config via router advertisement, for some reason the "client" computer, running 12.3 keeps on sending out neighbour advertisements for the address it would have when connected to my main network. Ifconfig shows it has IPv6 addresses for both subnets, though it's only connected to one. Ip -6 route show also shows routes for both subnets. Is that info being cached somewhere, when it shouldn't be? That computer is using the KDE network manager. BTW, I have a /56 subnet, which equals 256 /64 subnets, of which I'm currently using 2. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Op 28-11-14 om 04:30 schreef James Knott:
I just set up a 2nd IPv6 subnet for my guest WiFi. While my openSuSE 13.1 based router provides the correct router config via router advertisement, for some reason the "client" computer, running 12.3 keeps on sending out neighbour advertisements for the address it would have when connected to my main network. Ifconfig shows it has IPv6 addresses for both subnets, though it's only connected to one. Ip -6 route show also shows routes for both subnets. Is that info being cached somewhere, when it shouldn't be? That computer is using the KDE network manager.
BTW, I have a /56 subnet, which equals 256 /64 subnets, of which I'm currently using 2.
James, I'm not an ip-v6 guru at all, but ipv6 addresses are valid for some time. http://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/hints-daemons-radvd.html describes this a bit. P.S. can you point me to documentation how to set up ipv6 routes ? Or should I start a new thread ? HTH Koenraad. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Koenraad Lelong wrote:
Op 28-11-14 om 04:30 schreef James Knott:
I just set up a 2nd IPv6 subnet for my guest WiFi. While my openSuSE 13.1 based router provides the correct router config via router advertisement, for some reason the "client" computer, running 12.3 keeps on sending out neighbour advertisements for the address it would have when connected to my main network. Ifconfig shows it has IPv6 addresses for both subnets, though it's only connected to one. Ip -6 route show also shows routes for both subnets. Is that info being cached somewhere, when it shouldn't be? That computer is using the KDE network manager.
BTW, I have a /56 subnet, which equals 256 /64 subnets, of which I'm currently using 2.
James,
I'm not an ip-v6 guru at all, but ipv6 addresses are valid for some time. http://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/hints-daemons-radvd.html describes this a bit.
P.S. can you point me to documentation how to set up ipv6 routes ? Or should I start a new thread ?
Look up radvd. -- Per Jessen, Zürich (6.2°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 11/28/2014 02:59 AM, Koenraad Lelong wrote:
Op 28-11-14 om 04:30 schreef James Knott:
I just set up a 2nd IPv6 subnet for my guest WiFi. While my openSuSE 13.1 based router provides the correct router config via router advertisement, for some reason the "client" computer, running 12.3 keeps on sending out neighbour advertisements for the address it would have when connected to my main network. Ifconfig shows it has IPv6 addresses for both subnets, though it's only connected to one. Ip -6 route show also shows routes for both subnets. Is that info being cached somewhere, when it shouldn't be? That computer is using the KDE network manager.
BTW, I have a /56 subnet, which equals 256 /64 subnets, of which I'm currently using 2.
James,
I'm not an ip-v6 guru at all, but ipv6 addresses are valid for some time. http://www.tldp.org/HOWTO/Linux+IPv6-HOWTO/hints-daemons-radvd.html describes this a bit.
I'll have to look into that, but why should it survive a reboot? Also, why should it assume it's connected to a network that it's not? That's the whole purpose of router advertisements, to tell the device what networks are available. The computer I'm using is a notebook, which I should be able to take to another network and have it work there without problem. With IPv4 and DHCP, while the computer will try to get the previous assigned address, it won't get it if it's not available on another network. Also, I have seen this issue on a smart phone, so it's not just an openSuSE issue.
P.S. can you point me to documentation how to set up ipv6 routes ? Or should I start a new thread ?
Same as with IPv4. You use the ip commands: ip address add <address>/64 dev <dev ID> ip route add <subnet address>/64 dev <dev ID> The above assumes a /64 subnet. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Op 28-11-14 om 14:01 schreef James Knott:
I'll have to look into that, but why should it survive a reboot?
I missed that. I presumed you just activated another accesspoint.
P.S. can you point me to documentation how to set up ipv6 routes ? Or should I start a new thread ?
Same as with IPv4. You use the ip commands: ip address add <address>/64 dev <dev ID> ip route add <subnet address>/64 dev <dev ID>
Well, I wanted an automatic setup. And radvd does not announce routes AFAIK. But I don't want to hijack the thread, so I'll start a new one, as soon as I refresh my memory about what I did try in the past. Koenraad. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 12/01/2014 08:40 AM, Koenraad Lelong wrote:
And radvd does not announce routes AFAIK
That is exactly what it does. Routers announce their presence on the network and provide their address and subnet info. Radvd is used in Linux to provide that function. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 11/28/2014 04:30 AM, James Knott wrote:
I just set up a 2nd IPv6 subnet for my guest WiFi. While my openSuSE 13.1 based router provides the correct router config via router advertisement, for some reason the "client" computer, running 12.3 keeps on sending out neighbour advertisements for the address it would have when connected to my main network. Ifconfig shows it has IPv6 addresses for both subnets, though it's only connected to one. Ip -6 route show also shows routes for both subnets. Is that info being cached somewhere, when it shouldn't be? That computer is using the KDE network manager.
BTW, I have a /56 subnet, which equals 256 /64 subnets, of which I'm currently using 2.
Does your router send RAs for both subnets on the guest wlan? Run radvdump on the client to check this. Probably another device sends RAs for thw wrong subnet? Check /etc/radvd.conf on the router to ensure both wlan interfaces are configured properly. Does the router use the correct nestmasks for both subnets?
On 11/28/2014 03:00 AM, Florian Gleixner wrote:
Does your router send RAs for both subnets on the guest wlan? Run radvdump on the client to check this. Probably another device sends RAs for thw wrong subnet? Check /etc/radvd.conf on the router to ensure both wlan interfaces are configured properly. Does the router use the correct nestmasks for both subnets?
I left Wireshark running on that interface for several hours, capturing only ICMP6. With no devices connected, all it had were the router advertisements. Every one of those RAs showed the correct info. Radvd.conf has the correct info and the subnet mask on both subnets is /64. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 11/28/2014 02:05 PM, James Knott wrote:
On 11/28/2014 03:00 AM, Florian Gleixner wrote:
Does your router send RAs for both subnets on the guest wlan? Run radvdump on the client to check this. Probably another device sends RAs for thw wrong subnet? Check /etc/radvd.conf on the router to ensure both wlan interfaces are configured properly. Does the router use the correct nestmasks for both subnets?
I left Wireshark running on that interface for several hours, capturing only ICMP6. With no devices connected, all it had were the router advertisements. Every one of those RAs showed the correct info. Radvd.conf has the correct info and the subnet mask on both subnets is /64.
Wireshark on the client computer i guess. Running radvdump is probably easier. You should also grep for the ipv6 address in /var/log/messages to see how the address is set. Look at /etc/sysconfig/network if you have a fixed IPv6 configured there. Then - if you use network manager look there. You can run nm-connection-editor from the command line.
On 11/28/2014 08:29 AM, Florian Gleixner wrote:
On 11/28/2014 02:05 PM, James Knott wrote:
On 11/28/2014 03:00 AM, Florian Gleixner wrote:
Does your router send RAs for both subnets on the guest wlan? Run radvdump on the client to check this. Probably another device sends RAs for thw wrong subnet? Check /etc/radvd.conf on the router to ensure both wlan interfaces are configured properly. Does the router use the correct nestmasks for both subnets? I left Wireshark running on that interface for several hours, capturing only ICMP6. With no devices connected, all it had were the router advertisements. Every one of those RAs showed the correct info. Radvd.conf has the correct info and the subnet mask on both subnets is /64.
Wireshark on the client computer i guess. Running radvdump is probably easier.
Radvdump is only available if you install the radvd package, which would not normally be done on other than a router. However, I have installed it. I also fired up Wireshark on the notebook and also a desktop connected to the main network. Both show both RAs, but radvdump on the notebook showed both while on the desktop only the one network that it should have. This is getting weird. My router is configured with a vlan, which is used for a 2nd WiFi SSID for guest access. This guest WiFi connects only to the Internet. As I mentioned earlier, Wireshark, displaying the vlan only shows the proper RA for that subnet, but both on the main subnet. So, how are both RAs appearing there and on the computers?
You should also grep for the ipv6 address in /var/log/messages to see how the address is set.
Look at /etc/sysconfig/network if you have a fixed IPv6 configured there. Then - if you use network manager look there. You can run nm-connection-editor from the command line.
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 11/28/2014 10:17 AM, James Knott wrote:
My router is configured with a vlan, which is used for a 2nd WiFi SSID for guest access. This guest WiFi connects only to the Internet. As I mentioned earlier, Wireshark, displaying the vlan only shows the proper RA for that subnet, but both on the main subnet. So, how are both RAs appearing there and on the computers?
I just set up a vlan interface on the desktop computer and it appears to have the correct IPv6 address and subnet for the vlan. One other curious thing I noticed. Previously, with an earlier version of openSuSE, I was getting both MAC and random number IPv6 addresses, but since upgrading to 13.x, was only getting the MAC based. I again see both on the VLAN interface, but not on ethernet. Weird! -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 11/28/2014 10:35 AM, James Knott wrote:
On 11/28/2014 10:17 AM, James Knott wrote:
My router is configured with a vlan, which is used for a 2nd WiFi SSID for guest access. This guest WiFi connects only to the Internet. As I mentioned earlier, Wireshark, displaying the vlan only shows the proper RA for that subnet, but both on the main subnet. So, how are both RAs appearing there and on the computers? I just set up a vlan interface on the desktop computer and it appears to have the correct IPv6 address and subnet for the vlan. One other curious thing I noticed. Previously, with an earlier version of openSuSE, I was getting both MAC and random number IPv6 addresses, but since upgrading to 13.x, was only getting the MAC based. I again see both on the VLAN interface, but not on ethernet.
Weird!
Wireshark on that VLAN on the desktop shows only the proper RA, but both on the Ethernet interface. The router shows only the proper RA on the VLAN, but both on Ethernet and the laptop shows both when connected to the guest WiFi, which is on the VLAN. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 11/28/2014 10:44 AM, James Knott wrote:
Wireshark on that VLAN on the desktop shows only the proper RA, but both on the Ethernet interface. The router shows only the proper RA on the VLAN, but both on Ethernet and the laptop shows both when connected to the guest WiFi, which is on the VLAN.
Mystery on the Ethernet side resolved. I didn't notice Wireshark was capturing the VLAN packets. The ones that showed the VLAN RAs contained the 801.Q VLAN tag. Still, how is the wrong RA getting across to the laptop via WiFi on VLAN 5? There are no VLAN tags there. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 11/28/2014 10:58 AM, James Knott wrote:
Wireshark on that VLAN on the desktop shows only the proper RA, but both on the Ethernet interface. The router shows only the proper RA on the VLAN, but both on Ethernet and the laptop shows both when connected to the guest WiFi, which is on the VLAN. Mystery on the Ethernet side resolved. I didn't notice Wireshark was capturing the VLAN packets. The ones that showed the VLAN RAs contained
On 11/28/2014 10:44 AM, James Knott wrote: the 801.Q VLAN tag. Still, how is the wrong RA getting across to the laptop via WiFi on VLAN 5? There are no VLAN tags there.
It appears the problem may be in my TP-Link TL901ND access point. I tried pinging a bogus IPv6 address that should be on the main subnet and the pings appeared there at the firewall and desktop computer. However, on the laptop, connected to the guest WiFi on the VLAN, I could also see the pings there. I can only conclude that the access point is passing IPv6 icmp from the mail main network to both SSIDs. I'll have to see if I can get a managed switch to prove this. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (4)
-
Florian Gleixner -
James Knott -
Koenraad Lelong -
Per Jessen