Dotaz: nie vsetky IPV 6 secondaries funguju

[eth4rendil]

Dobry den, mam problem s konfiguraciou ipv6. Mam nastavenych 9 dalsich ipv6 adries na eth0 a iba 2 z nich funguju. prideleny mam range a:4f8:190:2405:: / 64 (dhcp v konfiguracii eth0 si nevsimajte :) )

# cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
BOOTPROTO=dhcp
ONBOOT=yes
TYPE=Ethernet
PREFIX=29
DEFROUTE=yes
IPV4_FAILURE_FATAL=yes
IPV6INIT=yes
#NAME="System eth0"
#IPV6_AUTOCONF=no
IPV6_ROUTER=no
IPV6FORWARDING=no
PEERDNS=no
VLAN=no
IPV6_DEFROUTE=yes
#IPV6_DEFAULTDEV=eth0
IPV6_DEFAULTGW="fe80::1%eth0"
IPV6ADDR=a:4f8:190:2405::aa20
IPV6ADDR_SECONDARIES="a:4f8:190:2405::aa21 \
a:4f8:190:2405::644 \
a:4f8:190:2405::3 \
a:4f8:190:2405::5 \
a:4f8:190:2405::6 \
a:4f8:190:2405::7 \
a:4f8:190:2405::8 \
a:4f8:190:2405::9 \
a:4f8:190:2405::19 \
a:4f8:190:2405::22"

#uname -r
3.0.1.stk64

# route -n -A inet6
Kernel IPv6 routing table
Destination                                 Next Hop                                Flags Metric Ref    Use Iface
a:4f8:190:2405::/64                      ::                                      U     256    0        0 eth0
fe80::/64                                   ::                                      U     256    0        0 eth0
::/0                                        fe80::1                                 UG    1      0        0 eth0
::1/128                                     ::                                      U     0      113       1 lo
a:4f8:190:2405::3/128                    ::                                      U     0      0        1 lo
a:4f8:190:2405::5/128                    ::                                      U     0      4        1 lo
a:4f8:190:2405::6/128                    ::                                      U     0      0        1 lo
a:4f8:190:2405::7/128                    ::                                      U     0      0        1 lo
a:4f8:190:2405::8/128                    ::                                      U     0      0        1 lo
a:4f8:190:2405::9/128                    ::                                      U     0      0        1 lo
a:4f8:190:2405::19/128                   ::                                      U     0      5        1 lo
a:4f8:190:2405::22/128                   ::                                      U     0      0        1 lo
a:4f8:190:2405::644/128                  ::                                      U     0      0        1 lo
a:4f8:190:2405::aa20/128                 ::                                      U     0      0        1 lo
a:4f8:190:2405::aa21/128                 ::                                      U     0      0        1 lo
a::250:56ff:fe00:2eca/128                ::                                      U     0      5        1 lo
ff00::/8                                    ::                                      U     256    0        0 eth0

# cat /etc/centos-release
CentOS release 6.4 (Final)

# sysctl -a | grep ipv6
net.ipv6.neigh.default.mcast_solicit = 3
net.ipv6.neigh.default.ucast_solicit = 3
net.ipv6.neigh.default.app_solicit = 0
net.ipv6.neigh.default.delay_first_probe_time = 5
net.ipv6.neigh.default.gc_stale_time = 60
net.ipv6.neigh.default.unres_qlen = 3
net.ipv6.neigh.default.proxy_qlen = 64
net.ipv6.neigh.default.anycast_delay = 99
net.ipv6.neigh.default.proxy_delay = 79
net.ipv6.neigh.default.locktime = 0
net.ipv6.neigh.default.retrans_time_ms = 1000
net.ipv6.neigh.default.base_reachable_time_ms = 30000
net.ipv6.neigh.default.gc_interval = 30
net.ipv6.neigh.default.gc_thresh1 = 128
net.ipv6.neigh.default.gc_thresh2 = 512
net.ipv6.neigh.default.gc_thresh3 = 1024
net.ipv6.neigh.lo.mcast_solicit = 3
net.ipv6.neigh.lo.ucast_solicit = 3
net.ipv6.neigh.lo.app_solicit = 0
net.ipv6.neigh.lo.delay_first_probe_time = 5
net.ipv6.neigh.lo.gc_stale_time = 60
net.ipv6.neigh.lo.unres_qlen = 3
net.ipv6.neigh.lo.proxy_qlen = 64
net.ipv6.neigh.lo.anycast_delay = 99
net.ipv6.neigh.lo.proxy_delay = 79
net.ipv6.neigh.lo.locktime = 0
net.ipv6.neigh.lo.retrans_time_ms = 1000
net.ipv6.neigh.lo.base_reachable_time_ms = 30000
net.ipv6.neigh.eth0.mcast_solicit = 3
net.ipv6.neigh.eth0.ucast_solicit = 3
net.ipv6.neigh.eth0.app_solicit = 0
net.ipv6.neigh.eth0.delay_first_probe_time = 5
net.ipv6.neigh.eth0.gc_stale_time = 60
net.ipv6.neigh.eth0.unres_qlen = 3
net.ipv6.neigh.eth0.proxy_qlen = 64
net.ipv6.neigh.eth0.anycast_delay = 99
net.ipv6.neigh.eth0.proxy_delay = 79
net.ipv6.neigh.eth0.locktime = 0
net.ipv6.neigh.eth0.retrans_time_ms = 1000
net.ipv6.neigh.eth0.base_reachable_time_ms = 30000
net.ipv6.xfrm6_gc_thresh = 2048
net.ipv6.conf.all.forwarding = 0
net.ipv6.conf.all.hop_limit = 64
net.ipv6.conf.all.mtu = 1280
net.ipv6.conf.all.accept_ra = 1
net.ipv6.conf.all.accept_redirects = 1
net.ipv6.conf.all.autoconf = 1
net.ipv6.conf.all.dad_transmits = 1
net.ipv6.conf.all.router_solicitations = 3
net.ipv6.conf.all.router_solicitation_interval = 4
net.ipv6.conf.all.router_solicitation_delay = 1
net.ipv6.conf.all.force_mld_version = 0
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.all.temp_valid_lft = 604800
net.ipv6.conf.all.temp_prefered_lft = 86400
net.ipv6.conf.all.regen_max_retry = 5
net.ipv6.conf.all.max_desync_factor = 600
net.ipv6.conf.all.max_addresses = 16
net.ipv6.conf.all.accept_ra_defrtr = 1
net.ipv6.conf.all.accept_ra_pinfo = 1
net.ipv6.conf.all.accept_ra_rtr_pref = 1
net.ipv6.conf.all.router_probe_interval = 60
net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.all.proxy_ndp = 0
net.ipv6.conf.all.accept_source_route = 0
net.ipv6.conf.all.optimistic_dad = 0
net.ipv6.conf.all.mc_forwarding = 0
net.ipv6.conf.all.disable_ipv6 = 0
net.ipv6.conf.all.accept_dad = 1
net.ipv6.conf.all.force_tllao = 0
net.ipv6.conf.default.forwarding = 0
net.ipv6.conf.default.hop_limit = 64
net.ipv6.conf.default.mtu = 1280
net.ipv6.conf.default.accept_ra = 1
net.ipv6.conf.default.accept_redirects = 1
net.ipv6.conf.default.autoconf = 1
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.default.router_solicitations = 3
net.ipv6.conf.default.router_solicitation_interval = 4
net.ipv6.conf.default.router_solicitation_delay = 1
net.ipv6.conf.default.force_mld_version = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.default.temp_valid_lft = 604800
net.ipv6.conf.default.temp_prefered_lft = 86400
net.ipv6.conf.default.regen_max_retry = 5
net.ipv6.conf.default.max_desync_factor = 600
net.ipv6.conf.default.max_addresses = 16
net.ipv6.conf.default.accept_ra_defrtr = 1
net.ipv6.conf.default.accept_ra_pinfo = 1
net.ipv6.conf.default.accept_ra_rtr_pref = 1
net.ipv6.conf.default.router_probe_interval = 60
net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.default.proxy_ndp = 0
net.ipv6.conf.default.accept_source_route = 0
net.ipv6.conf.default.optimistic_dad = 0
net.ipv6.conf.default.mc_forwarding = 0
net.ipv6.conf.default.disable_ipv6 = 0
net.ipv6.conf.default.accept_dad = 1
net.ipv6.conf.default.force_tllao = 0
net.ipv6.conf.lo.forwarding = 0
net.ipv6.conf.lo.hop_limit = 64
net.ipv6.conf.lo.mtu = 16436
net.ipv6.conf.lo.accept_ra = 1
net.ipv6.conf.lo.accept_redirects = 1
net.ipv6.conf.lo.autoconf = 1
net.ipv6.conf.lo.dad_transmits = 1
net.ipv6.conf.lo.router_solicitations = 3
net.ipv6.conf.lo.router_solicitation_interval = 4
net.ipv6.conf.lo.router_solicitation_delay = 1
net.ipv6.conf.lo.force_mld_version = 0
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.conf.lo.temp_valid_lft = 604800
net.ipv6.conf.lo.temp_prefered_lft = 86400
net.ipv6.conf.lo.regen_max_retry = 5
net.ipv6.conf.lo.max_desync_factor = 600
net.ipv6.conf.lo.max_addresses = 16
net.ipv6.conf.lo.accept_ra_defrtr = 1
net.ipv6.conf.lo.accept_ra_pinfo = 1
net.ipv6.conf.lo.accept_ra_rtr_pref = 1
net.ipv6.conf.lo.router_probe_interval = 60
net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.lo.proxy_ndp = 0
net.ipv6.conf.lo.accept_source_route = 0
net.ipv6.conf.lo.optimistic_dad = 0
net.ipv6.conf.lo.mc_forwarding = 0
net.ipv6.conf.lo.disable_ipv6 = 0
net.ipv6.conf.lo.accept_dad = -1
net.ipv6.conf.lo.force_tllao = 0
net.ipv6.conf.eth0.forwarding = 0
net.ipv6.conf.eth0.hop_limit = 64
net.ipv6.conf.eth0.mtu = 1500
net.ipv6.conf.eth0.accept_ra = 1
net.ipv6.conf.eth0.accept_redirects = 1
net.ipv6.conf.eth0.autoconf = 1
net.ipv6.conf.eth0.dad_transmits = 1
net.ipv6.conf.eth0.router_solicitations = 3
net.ipv6.conf.eth0.router_solicitation_interval = 4
net.ipv6.conf.eth0.router_solicitation_delay = 1
net.ipv6.conf.eth0.force_mld_version = 0
net.ipv6.conf.eth0.use_tempaddr = 0
net.ipv6.conf.eth0.temp_valid_lft = 604800
net.ipv6.conf.eth0.temp_prefered_lft = 86400
net.ipv6.conf.eth0.regen_max_retry = 5
net.ipv6.conf.eth0.max_desync_factor = 600
net.ipv6.conf.eth0.max_addresses = 16
net.ipv6.conf.eth0.accept_ra_defrtr = 1
net.ipv6.conf.eth0.accept_ra_pinfo = 1
net.ipv6.conf.eth0.accept_ra_rtr_pref = 1
net.ipv6.conf.eth0.router_probe_interval = 60
net.ipv6.conf.eth0.accept_ra_rt_info_max_plen = 0
net.ipv6.conf.eth0.proxy_ndp = 0
net.ipv6.conf.eth0.accept_source_route = 0
net.ipv6.conf.eth0.optimistic_dad = 0
net.ipv6.conf.eth0.mc_forwarding = 0
net.ipv6.conf.eth0.disable_ipv6 = 0
net.ipv6.conf.eth0.accept_dad = 1
net.ipv6.conf.eth0.force_tllao = 0
net.ipv6.ip6frag_high_thresh = 262144
net.ipv6.ip6frag_low_thresh = 196608
net.ipv6.ip6frag_time = 60
net.ipv6.route.gc_thresh = 1024
net.ipv6.route.max_size = 4096
net.ipv6.route.gc_min_interval = 0
net.ipv6.route.gc_timeout = 60
net.ipv6.route.gc_interval = 30
net.ipv6.route.gc_elasticity = 9
net.ipv6.route.mtu_expires = 600
net.ipv6.route.min_adv_mss = 1220
net.ipv6.route.gc_min_interval_ms = 500
net.ipv6.icmp.ratelimit = 1000
net.ipv6.bindv6only = 0
net.ipv6.ip6frag_secret_interval = 600
net.ipv6.mld_max_msf = 64

a takto to nefunguje:

# for riadok in `ifconfig eth0 | awk '$4 == "Scope:Global" { print $3 }' |sed 's/\/64//g'`;do ping6 -c 1 -v -I $riadok ipv6.google.com -w 1 >/dev/null && echo $riadok ok|| echo $riadok not ok ;done
a:4f8:190:2405::19 ok
a:4f8:190:2405::3 not ok
a:4f8:190:2405::7 not ok
a:4f8:190:2405::5 ok
a:4f8:190:2405::aa21 not ok
a:4f8:190:2405::22 not ok
a:4f8:190:2405::644 not ok
a:4f8:190:2405::aa20 not ok
a:4f8:190:2405::8 not ok
a:4f8:190:2405::6 not ok
a:4f8:190:2405::9 not ok

Funguju iba tie, ktore maju v route Ref nenulovu hodnotu. V manualoch som sa docital iba toto: Ref: Number of references to this route. Co nie je moc velavravne :)

Vedel by niekto poradit co tomu moze byt? Dakujem pekne

Odpovědi

[Michal]

• Já bych začal tím že bych všechny /128 změnil na /64.
• Pak bych zkusil zvenku pingat na jednotlivé adresy a tcpdumpem koukal co se děje. Např odpovídá ten server na neighbor solicitation?
• Ref!=0 je řekl bych důsledek spíš než příčina - u aktivních adres se to číslo zvyšuje.

[pavlix]

Já bych začal tím že bych všechny /128 změnil na /64.

K tomu úplně nevidím důvod, bohatě by mělo stačit dát délku prefixu té hlavní adrese.

[Michal Kubeček]

Místo výstupů 14 let obsolentních utilit raději ukažte výstup "ip addr show" a "ip route show", ať se můžeme podívat, jak ta konfigurace opravdu vypadá. A když říkám výstupy, myslím tím skutečné výstupy příkazů, ne náhodně obfuskované.

[pavlix]

Přesně tak. Bez toho se to dost blbě čte.