IPv6 Tunnel Shared With Jails via epair Devices

Shawn Webb lattera at gmail.com
Tue Jan 15 22:56:17 UTC 2013


Somehow there ended up a typo in the CC to freebsd-stable at freebsd.org. Last
email below:

On Tue, Jan 15, 2013 at 5:53 PM, Shawn Webb <lattera at gmail.com> wrote:

> On Tue, Jan 15, 2013 at 4:52 PM, Ben Morrow <ben at morrow.me.uk> wrote:
>
>> Quoth Shawn Webb <lattera at gmail.com>:
>> > On Tue, Jan 15, 2013 at 2:54 PM, Ben Morrow <ben at morrow.me.uk> wrote:
>> > >
>> > >     ifconfig epair0b inet6 -ifdisabled
>> > >
>> > > I don't know why you get that error when you miss out the 'inet6';
>> it's
>> > > not exactly very clear.
>> > >
>> >
>> > Ah. That works. I'll just have to add that to my scripts. Since the
>> device
>> > won't come out of tentative mode without manually removing the
>> ifdisabled
>> > flag, should I go ahead and file a PR? It'd be nice if I could at the
>> very
>> > least set a timeout for DAD.
>>
>> DAD already has a timeout: it succeeds iff no packets indicating someone
>> else is using the address are received in a given time. The only reason
>> for an address remaining tentative indefinitely (without transitioning
>> to either valid or duplicated) is if IPv6 on that interface has been
>> disable entirely by setting IFDISABLED. If DAD fails for the LL address
>> the interface is marked IFDISABLED but the LL address is marked
>> duplicated rather than tentative.
>>
>
> I figured it out. In my jail initialization scripts, I'm running '/bin/sh
> /bin/rc' after doing initial network setup. The rc script puts the
> interface in IFDISABLED mode. So if I run the ifconfig command to remove
> the flag, I'm golden. I've committed and pushed the code that fixes the
> problem in my scripts. If you're curious, you can look at
> https://github.com/lattera/drupal-jailadmin/commit/cbf8509712c3dd237bbc020f49f63b51507b7be4
>
> Thanks for the help. I really appreciate it.
>


More information about the freebsd-stable mailing list