Hello,

My ISP gave me a /56 and told me it was statically routed (no
DHCPv6-PD).

Let's say this prefix 2a02:aa08:BBBB:YY00::/56 is now x00::/56

What I want to do, is to split this prefix into /64 and use the /64 for
my vlans.

So what I did is on my interfaces I have the following ips:

wan x00::1:1/64
vlan1 x01::1:1/64
vlan2 x02::1:1/64
...

The ISP router is at x00::1 so I did

route add -inet6 default x00::1

In pf.conf I have a pass all for icmpv6

>From this point I have two issues:

- I can ping internet from my router, but it cuts every 10 seconds or
  so. If I inspect the traffic, I see that the ISP router is sending
  neighbor discovery with my router address, and that my router does not
  respond. 

So on my wan interface I see tons of neighbor advertisement from the ISP
router at x00::1 with flags router/solicited/override set, I also see
neighbor solicitation from the ISP router to my router. There is also
neighbor solicitation from my router to the ISP router, but what I
don't see is the neighbord advertisement from my router TO the ISP
router. So I guess the ISP router is removing the NDP entry of my router
after some times, and put it back when it sees the neighbor solicitation
again. How can I make so that my openbsd router will respond to the
neighbor solicitation from the ISP router?

- The second issue is how do I tell the ISP (cisco) router that I am the
  router for the /64 in the /56? If I ping from an inside host, the
  packet gets router into the WAN interface, and I see that the ISP
  router is doing neighbor solicitation for the source addrress, like
  this:

ping from x01::10:1 to external ip E
packet reaches x01::1:1, is routed by the openbsd router, and is visible
on wan
ISP router sees the packet on the WAN inteface and sends a neighbor
solicitation for x01::1:1 which is not answered because x01::1:1 is on
another subnet behind the openbsd router.

Any idea for those two issues?


-- 
Nicolas Goy
Engineer & Developer

https://www.kuon.ch
https://www.goyman.com

Reply via email to