Re: operational reasons to disable IPv6 link-level on some interfaces

[Michael Richardson <mcr%sandelman.ca@localhost>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


>>>>> "Greg" == Greg Troxel <gdt%ir.bbn.com@localhost> writes:
    >> When I look at the network, I see:
    >> 
    >> rtr3-[~] root 6 #tcpdump -v -e -i agr0 -n -p 
    >> (btw: without -p, the NetBSD-5.1-rc2 sometimes crashed)
    >> 
    >> 15:37:02.715610 00:40:63:e2:0b:04 > 33:33:ff:00:02:54, ethertype 802.1Q 
(0x8100), length 90: vlan 82, p 0, ethertype IPv6, (hlim 255, next-header: 
ICMPv6 (58), length: 32) 2001:abc:efg:82::251 > ff02::1:ff00:254: [icmp6 sum 
ok] ICMP6, neighbor solicitation, length 32, who has 2001:abc:efg:82::254
    >> source link-address option (1), length 8 (1): 00:40:63:e2:0b:04
    >> 
    >> 15:37:02.715925 00:24:38:ef:20:81 > 00:40:63:e2:0b:04, ethertype IPv6 
(0x86dd), length 86: (class 0xc0, hlim 255, next-header: ICMPv6 (58), length: 
32) 2001:abc:efg:82::254 > 2001:abc:efg:82::251: [icmp6 sum ok] ICMP6, neighbor 
advertisement, length 32, tgt is 2001:abc:efg:82::254, Flags [router, 
solicited, override]
    >> destination link-address option (2), length 8 (1): 00:24:38:ef:20:81

    Greg> So if that ifconfig -a and trace is from your box, then your machine
    Greg> sent a neighbor solicited on vlan82, and the ::254 machine sent you a
    Greg> reply on the bare ethernet - which seems wrong.  I see no
    Greg> evidence that 
    Greg> ::251 has misbehaved.  Is ::254 your machine, and does it run NetBSD?

Huh, you are right, I looked at it backwards.
It is my machine, a Brocade 2024F, no it doesn't run NetBSD.

At least I know about the ndp command before, which I never knew about
before...

- -- 
]       He who is tired of Weird Al is tired of life!           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr%sandelman.ottawa.on.ca@localhost http://www.sandelman.ottawa.on.ca/ 
|device driver[
   Kyoto Plus: watch the video <http://www.youtube.com/watch?v=kzx1ycLXQSE>
                       then sign the petition. 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Finger me for keys

iQEVAwUBTOMs6oCLcPvd0N1lAQLy/Qf/SelaQqokj27oATSncawQb2SRjPRblYPZ
qSbHn44Kl6Ts5itNTaa7Jh6YAzJUljrY44gfj9OPzrwpXjPv5+k+/PEL+YQDjpJ9
lBbWQdVByRRLPx6swOlisAf8BCgf2o9nZuluzamT7diGrj7hHB9JswXJkBdXoF2C
rBz3tVBq7eTMScg1yXAME0vSANwo99BcZAl3JurmiRbgHeLfr1LOO3rLAd4bnbca
PARqWhS2wOksI6G+Vr9ZegBbFgoYu7xP8dzrBowyqsgwUjW35iexMBamrj/TLxXF
XE/ikBSpdakA+dOluP6eJeyBiYG4l3lzEZvLQogrb5VdXSnyEWBSeQ==
=zUDj
-----END PGP SIGNATURE-----