Hello @misc
since 1 week i have a strange issue on one of my dual stack routers. The
router doesn't answer on icmp6 on one of its interfaces. (but on all
others, i works very well)

tcpdump -nni vlan851
00:08:07.204986 2001:660:XXXX:ff::2:1 > 2001:660:XXXX:ff::2:2: icmp6:
neighbor sol: who has 2001:660:2012:ff::2:2 [class 0xe0]
00:08:08.205047 2001:660:XXXX:ff::2:1 > 2001:660:XXXX:ff::2:2: icmp6:
neighbor sol: who has 2001:660:2012:ff::2:2 [class 0xe0]

ifconfig vlan851
vlan851: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        lladdr a0:36:9f:10:4a:a7
        priority: 0
        vlan: 851 parent interface: trunk0
        groups: vlan
        status: active
        inet6 fe80::a236:9fff:fe10:4aa7%vlan851 prefixlen 64 scopeid 0xe
        inet6 2001:660:XXXX:ff::2:2 prefixlen 126

I tried to down/up the interface, destroy and netstart it but this
refuses to work.
If i try a ping6, it works....
PING6(56=40+8+8 bytes) 2001:660:XXXX:ff::2:2 --> 2001:660:XXXX:ff::2:1
16 bytes from 2001:660:XXXX:ff::2:1, icmp_seq=0 hlim=64 time=32.154 ms
16 bytes from 2001:660:XXXX:ff::2:1, icmp_seq=1 hlim=64 time=0.971 ms
16 bytes from 2001:660:XXXX:ff::2:1, icmp_seq=2 hlim=64 time=0.884 ms

My pf rules are common for all icmp and works for all interfaces:
pass quick inet proto icmp all no state
pass quick inet6 proto ipv6-icmp all no state

uname -a
OpenBSD 5.2 GENERIC.MP#368 amd64

pcidump

--
Best regards,
Loïc BLOT,
UNIX systems, security and network engineer
http://www.unix-experience.fr

[demime 1.01d removed an attachment of type application/pgp-signature which had 
a name of signature.asc]

Reply via email to