Subject: Re: Turning off IPv6 on an interface?
To: Bill Sommerfeld <sommerfeld@orchard.arlington.ma.us>
From: None <itojun@iijlab.net>
List: tech-net
Date: 07/05/1999 07:21:18
>Is there any way to turn off IPv6 on one interface of a multihomed
>host?
>I'd like to put an INET6 kernel on my home firewall/security
>gateway/router.  However, I *don't* want it talking IPv6 at the cable
>modem, even with just a link-local address.
>How can I turn that off?
>The first thing I tried was doing an `ifconfig fxp0 inet6 delete'.
>That didn't work.

	% ifconfig fxp0 inet6 fe80:..... -alias
	should work.  However, it currently appear again if you bring
	fxp0 up (so after down->up session the link-local address will
	appear again).

>The next thing I tried was using "setkey" to establish an ipsec
>security policy database entry to drop all IPv6 packets; that didn't
>work either:
>% setkey spdadd ::0/0 ::0/0 any -P discard
>Usage:  ./setkey [-dv] -c       ./setkey [-dv] -f (file)
>        ./setkey [-Padlv] -D
>        ./setkey [-Pdv] -F
>        ./setkey [-h] -x
>What am I missing?

	setkey takes input from standard input, not from the command line.
	sorry if it is not documented enough.

itojun