2

I've tried multiple pieces of DHCP client and software in attempting to setup a solution for allocating a /127 prefix to virtual machines so that each maintains its own layer 2 isolation. Because there would only be one host assigned to each network, a /64 is impractical.

While the prefix size could reasonably be somewhere in the /64-127 range, the crux of the problem has been the same regardless of the software used in configuring: the DHCP call to bring up the interface uses the address advertised by DHCPv6 and inserts two routes: the /127 given by the router advertising packets and a /64 as well.

Any thoughts on why I'm getting the additional route added across dhcp client vendors?

1
  • Can you add your RA and DHCPv6 configs? Dec 11, 2012 at 10:03

1 Answer 1

1

SLAAC only work with /64 networks because the host needs the right-most 64 bits for it's generated EUI64 address [1]. So if the host determines it needs to do SLAAC (either because your Router Advertisements indicate so, or the host chooses to ignore your RA flags) thwn it has no choice but to make a /64 address.

You need to make sure your hosts aren't deciding to create SLAAC addresses for themselves. [2]

[1] See "Stateless Address Assignment" on this page https://supportforums.cisco.com/docs/DOC-23871

[2] For Linux, this may work: Is there a way to disable IPv6 SLAAC on a per-interface basis in Debian?

5
  • There are two flags in a router advertisement: the "A" flag (use SLAAC), and the the "M" flag on (use DHCPv6). A is off, M is on. Router Advertisements must be in place regardless of the subnet size because DHCPv6 packets don't include router information the way that DHCPv4 packets do, nor do they include subnet prefix sizes. Dec 17, 2012 at 23:49
  • @JeffFerland You're right, so the OP probably has the A flag set in his/her RA's. I'll edit my answer to correct the discrepancy.
    – fukawi2
    Dec 18, 2012 at 3:28
  • Additionally, DHCPv6 does not provide routing information at all. That is left to the RA, which will be a /64.
    – bahamat
    Dec 18, 2012 at 4:18
  • @fukawi2 I am the OP. The A flag is not set. Dec 18, 2012 at 7:34
  • @JeffFerland Whoops, my bad. So have you disabled SLAAC explicitly?
    – fukawi2
    Dec 18, 2012 at 8:25

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .