IPv6 aliases don't work on carp interface

[Ermal Luçi]

On Wed, Oct 31, 2012 at 1:21 PM, tsaregorodtsev.denis at itmh.ru
<tsaregorodtsev.denis at itmh.ru> wrote:
> On 31.10.2012 16:42, Ermal Luçi wrote:
>>
>> On Wed, Oct 31, 2012 at 9:59 AM, tsaregorodtsev.denis at itmh.ru
>> <tsaregorodtsev.denis at itmh.ru> wrote:
>>>
>>> Hi,
>>> I've run into a problem while adding IPv6 aliases on carp interface on
>>> FreeBSD 8.1.
>>> All IPv6 aliases on carp interface are unreachable from other devices but
>>> the first IPv6 on carp interface works well.
>>>
>>> # ifconfig
>>> em0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0
>>> mtu
>>> 1500
>>>          options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
>>>          ether 00:50:56:ad:00:5f
>>>          inet 172.16.249 netmask 0xffffff00 broadcast 255.255.255.224
>>>          inet6 2001:db8:af:ff01:1:be60:80:700 prefixlen 64
>>>          nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
>>>          media: Ethernet autoselect (1000baseT <full-duplex>)
>>>          status: active
>>> ipfw0: flags=8801<UP,SIMPLEX,MULTICAST> metric 0 mtu 65536
>>> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
>>>          options=3<RXCSUM,TXCSUM>
>>>          inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
>>>          inet6 ::1 prefixlen 128
>>>          inet 127.0.0.1 netmask 0xff000000
>>>          nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
>>> carp0: flags=49<UP,LOOPBACK,RUNNING> metric 0 mtu 1500
>>>          inet6 2001:db8:af:ff01:1:be60:80:70f prefixlen 128
>>>          inet6 2001:db8:af:ff01:1:be60:80:70e prefixlen 128
>>>          nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
>>>          carp: MASTER vhid 250 advbase 1 advskew 0
>>>
>>> # ping6 2001:db8:af:ff01:1:be60:80:70f
>>> PING 2001:db8:af:ff01:1:be60:80:70f(2001:db8:af:ff01:1:be60:80:70f) 56
>>> data
>>> bytes
>>> 64 bytes from 2001:db8:af:ff01:1:be60:80:70f: icmp_seq=1 ttl=59
>>> time=0.793
>>> ms
>>> 64 bytes from 2001:db8:af:ff01:1:be60:80:70f: icmp_seq=2 ttl=59
>>> time=0.837
>>> ms
>>>
>>> # ping6 2001:db8:af:ff01:1:be60:80:70e
>>> PING 2001:db8:af:ff01:1:be60:80:70e(2001:db8:af:ff01:1:be60:80:70e) 56
>>> data
>>> bytes From 2001:db8:af:ff00::1 icmp_seq=1 Destination unreachable:
>>> Address
>>> unreachable From 2001:db8:af:ff00::1 icmp_seq=4 Destination unreachable:
>>> Address unreachable
>>>
>>> If I delete both IPs and add inet6 2001:db8:af:ff01:1:be60:80:70e before
>>> inet6 2001:db8:af:ff01:1:be60:80:70f then 2001:db8:af:ff01:1:be60:80:70e
>>> does work and 2001:db8:af:ff01:1:be60:80:70f does not.
>>>
>>> I googled this issue and found a
>>>
>>> patchhttp://lists.freebsd.org/pipermail/freebsd-net/2011-August/029619.html
>>> I've tried to apply it but the problem still exists. I've tested this
>>> issue
>>> on FreeBSD9.1 RC2 as well and there was the same problem.
>>>
>>> Best Regards,
>>> Tsaregorodtsev Denis
>>>
>> On pfSense there is a patch carp_ip_aliasfix.diff found here
>>
>> https://github.com/bsdperimeter/pfsense-tools/tree/master/patches/RELENG_8_3
>> Though the problem with that is that  you have to apply many patches
>> before it can be applied as well.
>
> Thank you for your answers.
> Ermal I have several questions. Does carp_ip_alias_fix.diff solve the
> problem with IPv6 aliases on carp interfaces?
> To apply this patch I need to apply certain patches before. Is there a
> complete list of these patches and the sequence order?

The list of patches is
https://github.com/bsdperimeter/pfsense-tools/blob/master/builder_scripts/patches.RELENG_8_3
Just use the ones with carp in the name.

In pfSense carp ip aliases work quite ok on both v4 and v6.

>
>>> _______________________________________________
>>> freebsd-net at freebsd.org mailing list
>>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>>> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>>
>>
>>
>



-- 
Ermal