Hi
I am implementing a dhcpdv6 deployment for a living facility based off
of a OpenBSD router.
I have so far been running rtadvd for SLAAC addresses which is running
fine but some people need prefix delegation for their own equipment
and thus I am working with dhcpdv6 from the isc-dhcp-server package.
The error I am getting is:
Solicit message from fe80::2e59:e5ff:fe00:9b09 port 546, transaction
ID 0x5B174E00
Picking pool address 2a02:188:5002:7a00::ff
Advertise NA: address 2a02:188:5002:7a00::ff to client with duid
00:04:e8:b6:be:e1:99:b6:bf:f0:35:23:b6:6c:37:8b:2f:04 iaid =
-452945143 valid for 600 seconds
Sending Advertise to fe80::2e59:e5ff:fe00:9b09 port 546
send_packet6: Network is unreachable
dhcpv6: send_packet6() sent -1 of 168 bytes
netstat gives routing table as:
# netstat -rn | grep 9b09
fe80::2e59:e5ff:fe00:9b09%vlan710 link#106 UHLc 0 0 - 4 vlan710
ff02::1:ff00:9b09%vlan710 link#106 UHLc 0 0 - 4 vlan710
All this is running in a VLAN setting with all the "client"
interfaces running on top of the same physical interface.
This means that all the VLAN interfaces has the same link-local
address, however, OpenBSD puts a scope on the interface.
vlan710: flags=48843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,
INET6_NOPRIVACY> mtu 1500
lladdr 84:34:97:11:c4:95
description: vlan710
priority: 0
vlan: 710 parent interface: bge1
groups: vlan
status: active
inet6 fe80::8634:97ff:fe11:c495%vlan710 prefixlen 64 scopeid
0x6a
inet6 2a02:188:5002:7a00::1 prefixlen 64
inet 10.7.10.1 netmask 0xffffff00 broadcast 10.7.10.255
I'm wondering if pf is doing something to block the messages, but I
cannot tell, and I haven't been able to bypass pf on the interface.
Does anyone have a clue about what this issue could be? Or maybe
give a direction in which I could try to debug?
--
Med venlig hilsen/Best regards
Claus Lensbøl
Fab:IT ApS
Vesterbrogade 37, 2. th
DK-1620 København
Tlf: +45 70 202 407
Main Site: www.fab-it.dk
VPS Product: vpsforce.eu
