Questions tagged [icmpv6]

Internet Control Message Protocol version 6 (ICMPv6) is the implementation of the Internet Control Message Protocol (ICMP) for Internet Protocol version 6 (IPv6). ICMPv6 is defined in RFC 4443. ICMPv6 is an integral part of IPv6 and performs error reporting and diagnostic functions (e.g., ping).

Filter by
Sorted by
Tagged with
0 votes
0 answers
90 views

IPv6 ICMP rules for AWS Security Group

I'm in the process of configuring IPv6 ICMP rules in my AWS Security Group, specifically for an EC2 instance. I need to allow ICMP traffic for the PTMUD protocol and other related protocols. In the ...
xhci's user avatar
  • 1
0 votes
0 answers
1k views

SendEcho ERROR: sending to ICMPv6 packet to [2a06:98c1:3121::7]: (101) Network is unreachable

we are using (Ubuntu 20.04 / Squid server / running on Azure) we are getting bellow error, SendEcho ERROR: sending to ICMPv6 packet to [2a06:98c1:3121::7]: (101) Network is unreachable We are not ...
dinesht's user avatar
0 votes
2 answers
2k views

Can safely block these ICMPv6 message types on a web server?

I have a Debian 11 VPS on a cloud provider, with both IPv4 and IPv6 enabled and the eth0 interface with both a global-scoped ipv6 address (public) and a link-scoped ipv6 address (fe80::/10). The sole ...
Timido's user avatar
  • 111
0 votes
2 answers
264 views

Netflow records with Destination Ports 1025,257 and Protocol as ipv6-icmp

I have some Netflow records from a bunch of routers. The records contain IPv6 flows and there are entries with protocol as ipv6-icmp and their destination port values as 0, 1025 and 257. I know from ...
Said Jawad's user avatar
0 votes
0 answers
1k views

No Router Advertisement from router after sending Router Solicitation from Linux

Have a Debian 10 Linux and ZTE ZXR10 5960 L3 switch as a router on the network. The problem is that Linux send Router Solicitation (RS) packet without "Source link-layer address" as ICMPv6 ...
dshykuts's user avatar
4 votes
2 answers
9k views

How to nicely make a neighbors discovery solicitation on Linux?

I am looking for a way to retrieve the MAC address of a specific host on a LAN network. I know its IPv6 address. Ideally I would like a way to trigger the Linux Kernel to perform the neighbor ...
djoproject's user avatar
2 votes
1 answer
355 views

Difference between icmp and icmpv6 for ip6tables?

I found the following lines in a firewall script on one of our Linux servers (kernel 5.x) ip6tables -A INPUT -p icmp -j ACCEPT ip6tables -A INPUT -p ipv6-icmp -j ACCEPT The two commands both run ...
iBug's user avatar
  • 1,308
2 votes
1 answer
312 views

Almost empty pf.conf still logs packets

I have an issue that my pf logs many packets that it's not supposed to log. I reproduced it with almost empty pf.conf: set skip on lo and it still logs some packets. I think that all those packets ...
vbezhenar's user avatar
  • 273
0 votes
1 answer
289 views

Dynamic router advertising on IPv6

I have a problem that I'm hoping I can solve with IPv6 but since I haven't had a chance to try it yet I thought I'd propose my solution here. My problem is that we have a LAN with a number of devices ...
parsley72's user avatar
  • 224
1 vote
0 answers
109 views

Multiple routes from router advertisements

Consider the following simplified setup: All devices are IPv6 enabled. Interfaces are configured in a way that we have 3 networks as shown. Router advertisments are enabled on both routers R1 & ...
AhmedWas's user avatar
  • 373
3 votes
1 answer
134 views

Can I filter based on a ICMPv6 subtype?

I'm trying to filter out specific ICMPv6 packets and I tried looking at all the possible types options by using the following command: ip6tables -p icmpv6 -h This yields the following types (note ...
Adelin's user avatar
  • 129
0 votes
1 answer
328 views

ICMPv6 restrictive firewall: losing connectivity over time

The problem: Losing IPv6 connectivity to a remote IP after certain time period without establishing a connection to the remote IP. My setup: I'm running a server with ip6tables firewall that filters ...
Marek Rost's user avatar
1 vote
1 answer
333 views

Is it common for DHCPv6 and RA to provide IPv6 addr in the same subnet?

For IPv6, both DHCP and RA (the "prefix information" option, with the A flag) can provide IPv6 addresses to hosts. I'm still confused if it's common for DHCPv6 and RA to provide IP addresses in the ...
SF.express's user avatar
2 votes
1 answer
5k views

How to trigger IPv6 router solicitation on bridge slave port entering RUNNING state?

I have a small Linux system that runs a bridge br0 between its wired eth0 and wireless (AP mode) wlan0 network interfaces. For br0 I have enabled IPv6 (stateless) autoconfiguration; this is actually ...
TheDiveO's user avatar
  • 581
0 votes
1 answer
2k views

Disable ICMPv6 Destination Unreachable replies

iptables -I OUTPUT -p icmp --icmp-type destination-unreachable -j DROP The above command works for IPv4, what should be the command for IPv6 to drop the ICMPv6 destination-unreachable packets. I have ...
Shikhar Bhargava's user avatar
6 votes
1 answer
11k views

IPv6 - Allow incoming ICMP echo requests

So, we recently got our /48 prefix from our LIR, and started small-scale deploying it in a lab. What struck me as odd is that sites like http://ipv6-test.com/ insist that you allow incoming ICMP Echo ...
lightxx's user avatar
  • 197
1 vote
1 answer
767 views

Linux host does not retransmit with a lower packet size in response to ICMPv6 Packet Too Big message

I'm seeing this in Wireshark when curling this URL: On the same network, a Windows host retransmits properly, but an Android host does not. On a different network (presumably appropriately configured)...
univerio's user avatar
  • 131
0 votes
1 answer
58 views

IPv6 dead before receiving ICMPv6 ping

TCPv6 and UPDv6 are dead until server received ICMPv6 ping. Further analysis shows that actually TCP and UDP packets won't even come to the server. But after receiving ICMPv6 ping, everything starts ...
Sami Lehtinen's user avatar
0 votes
1 answer
639 views

How to ping a host with different MTU size to simulate icmpv6 packet too big scenario?

As the Title states,I want to check whether my host will actually send a ICMPv6 packet too big if i send a packet with beyond the defined MTU size.I don't have a cisco router(extended ping) to try out ...
Renold's user avatar
  • 33
0 votes
1 answer
2k views

Debian Wheezy doesn't answer to ICMPv6 neighbor solicitations

Hello, there. I manage some Wheezy servers with IPv6 enabled on all of them. They all have a global IPv6 /64 block using the first address in the block as the primary, i.e.: root@Host /h/david# ...
Penegal's user avatar
  • 156
1 vote
2 answers
2k views

IPv6 PPP Link fails forwarding Router Advertisements into local LAN

A Debian Server having eth0, eth1. eth2, ppp0 devices: 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether xx:yy:zz:yy:xx:yy brd ff:ff:ff:ff:...
3ronco's user avatar
  • 143
2 votes
1 answer
1k views

IPv6 radvd with vlans

Is it possible to configure the radvd config so that the router advertisement packets got a VLAN- tag? Theres a switch between my Router (software router, Ubuntu OS) and I only want some VLANs to ...
mushr00mer1990's user avatar
0 votes
1 answer
98 views

Worldwide IP Latency [closed]

I want to create a simulation of the protocol MIPv6 (http://www.ietf.org/rfc/rfc3775.txt), for this reason I need information about latency, jitter and round-trip time. My first guess is install ...
user213330's user avatar
1 vote
1 answer
11k views

Multicast Listener Report Message v2

I run an ICMPv6 protocol and I have made a capture using wireshark. In the capture I have some Multicast Listener Report Message v2. Some of the has the source ip, the ipv6 link local address, but ...
Dragos's user avatar
  • 11
7 votes
1 answer
9k views

Advertise a subnet route with radvd

we have set up a small IPv6 Testing network. The setup looks like this: ::/0 +----------+ | Firewall | Router to the public net +----------+ | 2001:...::/106 | +---------...
Thomas Berger's user avatar
0 votes
2 answers
1k views

IPv6 connect B to A works, A to B fails with B's SYN-ACK receiving ICMP destination unreachable prohibited

I'm testing on IPv6. A is a server in a Cogent colo with native IPv6, call it 2001:db8:1111::1. B is a Mac mini behind an Airport Extreme router behind ISP Comcast; the router is set up to use ...
Robert Tupelo-Schneck's user avatar
2 votes
2 answers
2k views

Filtering IPv6 ICMPv6 messages

So I'm playing around with IPv6 on my home network a bit more, and I'm doing things a bit old-fashioned -- setting up static addresses and such. This means I don't really want or care for all the ...
Kumba's user avatar
  • 638
3 votes
4 answers
5k views

IPv6, multiple routers and possible bad prefix advertisement in ICMPv6 RA

I have two 'router' type devices setup on my network. One is my actual IPv6 router - a Cisco 2621 (fe80::xxxx:3e60). It's the correct default router. Another is a DLINK DIR-615 (fe80::xxxx:5760). It'...
MikeyB's user avatar
  • 39.6k