Hi everyone, I'm hoping someone can help me as I'm not having much luck with adding IPv6 to the mix of our already working IPv4 setup.
What should /etc/hostname.carpX look like for an IPv6 setup? Is this correct;? inet 10.0.10.1 255.255.255.0 10.0.10.255 vhid 1 pass temppass advbase 3 advskew 0 inet6 2a00:7e0:0:a::1 64 Or should I have a separate carpX interface for the IPv6? When I do a tcpdump on the master I see; Aug 29 14:36:56.416723 00:00:5e:00:01:01 01:00:5e:00:00:12 0800 70: CARPv2-advertise 36: vhid=1 advbase=3 advskew=0 demote=33 (DF) [tos 0x10] Aug 29 14:36:56.416736 00:00:5e:00:01:01 33:33:00:00:00:12 86dd 90: fe80::a00:27ff:fe71:f4ca > ff02::12: CARPv2-advertise 36: vhid=1 advbase=3 advskew=0 demote=33 Aug 29 14:36:56.420823 08:00:27:71:f4:ca 33:33:00:00:00:01 86dd 86: fe80::1 > ff02::1: icmp6: neighbor adv: tgt is fe80::200:5eff:fe00:101 Aug 29 14:36:56.420835 08:00:27:71:f4:ca 33:33:00:00:00:01 86dd 86: fe80::1 > ff02::1: icmp6: neighbor adv: tgt is 2a00:77e0:0:a::1 Aug 29 14:36:57.638468 00:00:5e:00:01:01 01:00:5e:00:00:12 0800 70: CARPv2-advertise 36: vhid=1 advbase=3 advskew=100 demote=0 (DF) [tos 0x10] Aug 29 14:36:57.641021 00:00:5e:00:01:01 33:33:00:00:00:12 86dd 90: fe80::a00:27ff:fe88:bc8a > ff02::12: CARPv2-advertise 36: vhid=1 advbase=3 advskew=100 demote=0 Aug 29 14:37:01.049324 00:00:5e:00:01:01 01:00:5e:00:00:12 0800 70: CARPv2-advertise 36: vhid=1 advbase=3 advskew=100 demote=0 (DF) [tos 0x10] Aug 29 14:37:01.049685 00:00:5e:00:01:01 33:33:00:00:00:12 86dd 90: fe80::a00:27ff:fe88:bc8a > ff02::12: CARPv2-advertise 36: vhid=1 advbase=3 advskew=100 demote=0 Aug 29 14:37:04.458514 00:00:5e:00:01:01 01:00:5e:00:00:12 0800 70: CARPv2-advertise 36: vhid=1 advbase=3 advskew=100 demote=0 (DF) [tos 0x10] Aug 29 14:37:04.462013 00:00:5e:00:01:01 33:33:00:00:00:12 86dd 90: fe80::a00:27ff:fe88:bc8a > ff02::12: CARPv2-advertise 36: vhid=1 advbase=3 advskew=100 demote=0 Aug 29 14:37:06.648983 00:00:5e:00:01:01 01:00:5e:00:00:12 0800 70: CARPv2-advertise 36: vhid=1 advbase=3 advskew=0 demote=33 (DF) [tos 0x10] Aug 29 14:37:06.648996 00:00:5e:00:01:01 33:33:00:00:00:12 86dd 90: fe80::a00:27ff:fe71:f4ca > ff02::12: CARPv2-advertise 36: vhid=1 advbase=3 advskew=0 demote=33 I can see that the IPv6 CARP messages are using the link local address and not the global IPv6 addresses I have configured? Why?? :( This makes it really hard to write PF files as I would have to write filter rules considering the each physical hosts MAC addresses :( I'm also seeing errors stating that the inet6 carp address I have configured is a duplicate address! Although this could be due to the fact the firewalls are flapping between backup and master and there are going to be multi master periods. net.inet.carp.allow=1 net.inet.carp.preempt=1 net.inet.carp.log=3 net.inet6.ip6.forwarding=1 net.inet6.ip6.redirect=0 net.inet6.ip6.accept_rtadv=0 I am also starting to read "Firewalling IPv6 with OpenBSD's pf (packet filter)". Thanks for your time, Andy.
