• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Multiple Router Advertisements

Scheduled Pinned Locked Moved IPv6
24 Posts 5 Posters 2.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    JKnott @Derelict
    last edited by Oct 29, 2020, 9:30 PM

    @Derelict

    Use Packet Capture to capture some of those RAs and check the MAC address to see where they're coming from.

    PfSense running on Qotom mini PC
    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
    UniFi AC-Lite access point

    I haven't lost my mind. It's around here...somewhere...

    1 Reply Last reply Reply Quote 1
    • D
      Derelict LAYER 8 Netgate
      last edited by Oct 30, 2020, 1:04 AM

      I know exactly where they are coming from.

      I am looking for feedback on "client" behavior when more than one RA is on the network.

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      J 1 Reply Last reply Oct 30, 2020, 10:46 AM Reply Quote 0
      • K
        kiokoman LAYER 8
        last edited by kiokoman Oct 30, 2020, 11:58 AM Oct 30, 2020, 10:01 AM

        afaik
        SLAAC use information from RA to forward
        DHCPv6 use routing table

        https://tools.ietf.org/html/rfc6724
        7. Interactions with Routing

        https://tools.ietf.org/html/draft-ietf-v6ops-ra-guard-implementation-07

        ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
        Please do not use chat/PM to ask for help
        we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
        Don't forget to Upvote with the 👍 button for any post you find to be helpful.

        D 1 Reply Last reply Oct 30, 2020, 1:19 PM Reply Quote 0
        • J
          JKnott @Derelict
          last edited by Oct 30, 2020, 10:46 AM

          @Derelict said in Multiple Router Advertisements:

          I am looking for feedback on "client" behavior when more than one RA is on the network.

          Multiple RAs are permitted and IPv6 uses the priority (set in the router) to determine which one to use.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 1
          • D
            Derelict LAYER 8 Netgate @kiokoman
            last edited by Oct 30, 2020, 1:19 PM

            @kiokoman Thanks for that RFC.

            These sections were interesting:

            5. Source Address Selection (Specifically rule 5.5 and its discussion)

            7. Interactions with Routing

            10.5. Configuring a Multi-Homed Site

            But I still don't see anything that speaks to selecting a next-hop that is not already a default gateway on an interface in the routing table based on the source or destination addresses selected by the algorithm. In fact the discussion of rule 5.5 above specifically states that implementations do not have to track that so that tells me it cannot be relied on in a network design.

            @JKnott said in Multiple Router Advertisements:

            Multiple RAs are permitted and IPv6 uses the priority (set in the router) to determine which one to use.

            I understand that but that speaks to which router the stack decides to place in the routing table. I am looking for something outlining a routing algorithm to send traffic to a router NOT in the routing table based on the source (and possibly destination) address selected for the connection.

            RFC4861 sections 5.2 and 6.3.6 seem to be getting close.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            J 1 Reply Last reply Oct 30, 2020, 4:15 PM Reply Quote 0
            • K
              kiokoman LAYER 8
              last edited by Oct 30, 2020, 3:16 PM

              https://tools.ietf.org/html/rfc2080#section-2.1.1
              ?

              ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
              Please do not use chat/PM to ask for help
              we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
              Don't forget to Upvote with the 👍 button for any post you find to be helpful.

              D 1 Reply Last reply Oct 30, 2020, 3:34 PM Reply Quote 0
              • D
                Derelict LAYER 8 Netgate @kiokoman
                last edited by Oct 30, 2020, 3:34 PM

                @kiokoman said in Multiple Router Advertisements:

                https://tools.ietf.org/html/rfc2080#section-2.1.1
                ?

                RIP2?

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                J 1 Reply Last reply Oct 30, 2020, 4:20 PM Reply Quote 0
                • K
                  kiokoman LAYER 8
                  last edited by kiokoman Oct 30, 2020, 3:43 PM Oct 30, 2020, 3:38 PM

                  uhm i was searching for distance-vector algorithms and link-state algorithms
                  ended up reading this
                  http://www.cu.ipv6tf.org/literatura/chap7.pdf
                  idk when i ended up reading that rfc on another tab of my browser

                  ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                  Please do not use chat/PM to ask for help
                  we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                  Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                  J 1 Reply Last reply Oct 30, 2020, 4:22 PM Reply Quote 0
                  • J
                    JKnott @Derelict
                    last edited by Oct 30, 2020, 4:15 PM

                    @Derelict said in Multiple Router Advertisements:

                    I understand that but that speaks to which router the stack decides to place in the routing table. I am looking for something outlining a routing algorithm to send traffic to a router NOT in the routing table based on the source (and possibly destination) address selected for the connection.

                    In the Router Advertisements there is a setting for router priority. That is what RA uses. Normally, this would be used where an organization has their own address block advertised by BGP. They could have connections from multiple sources and the primary source would be given the highest priority. Then, should the primary fail, the lower priority RA would be used to send traffic through the secondary connection. Because the subnet is advertised via both connections, either one supports the same LAN addresses.

                    PfSense running on Qotom mini PC
                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                    UniFi AC-Lite access point

                    I haven't lost my mind. It's around here...somewhere...

                    D 1 Reply Last reply Oct 30, 2020, 4:24 PM Reply Quote 0
                    • J
                      JKnott @Derelict
                      last edited by Oct 30, 2020, 4:20 PM

                      @Derelict said in Multiple Router Advertisements:

                      RIP2?

                      GEEZ NO!. RIP is obsolete. Go with OSPF these days or EIGRP if you must. The main reason for not using RIP is it has no concept of bandwidth in a hop, so it will always chose the route with the fewest hops, even if those hops support much less bandwidth than another route. Both OSPF and EIGRP consider bandwidth when determining the best route.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • J
                        JKnott @kiokoman
                        last edited by Oct 30, 2020, 4:22 PM

                        @kiokoman said in Multiple Router Advertisements:

                        uhm i was searching for distance-vector algorithms and link-state algorithms
                        ended up reading this

                        Routing protocols have nothing to do with multiple RAs on a LAN. They are used by a router to determine the best route to another network, not the best router to use on a LAN.

                        PfSense running on Qotom mini PC
                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                        UniFi AC-Lite access point

                        I haven't lost my mind. It's around here...somewhere...

                        1 Reply Last reply Reply Quote 0
                        • D
                          Derelict LAYER 8 Netgate @JKnott
                          last edited by Oct 30, 2020, 4:24 PM

                          @JKnott You still do not seem to grasp the question I am asking. I will be setting something up deliberately to test this but it will be some time before I can do it.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          J 1 Reply Last reply Oct 30, 2020, 4:34 PM Reply Quote 0
                          • J
                            JKnott @Derelict
                            last edited by Oct 30, 2020, 4:34 PM

                            @Derelict

                            I thought you were talking about RAs from more than one source. Is that not correct? If so, then there are likely more than one router. If not, then you have some other issue. You even mention a rogue router in your original post. This is strictly a LAN issue, where you can have multiple routers and not a routing protocol issue, unless I have severely misread your original post.

                            PfSense running on Qotom mini PC
                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                            UniFi AC-Lite access point

                            I haven't lost my mind. It's around here...somewhere...

                            1 Reply Last reply Reply Quote 0
                            • D
                              Derelict LAYER 8 Netgate
                              last edited by Oct 30, 2020, 4:41 PM

                              There is more than one router. That is known. I called it a rogue because this router should not be sending RAs and it is (breaking IPv6 connectivity for this LAB segment), which is a completely separate issue. It is the behavior of the routing done by the host receiving such RAs that is curious, not the fact that multiple routers on the network are sending RAs.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              J 1 Reply Last reply Oct 30, 2020, 4:50 PM Reply Quote 0
                              • J
                                JKnott @Derelict
                                last edited by Oct 30, 2020, 4:50 PM

                                @Derelict

                                As I mentioned, the behaviour is for the receiving device to use the priority of the RA to determine which to use. However, I have no idea what happens if both RAs have the same priority. You can use Wireshark to see what the priority of a RA is.

                                PfSense running on Qotom mini PC
                                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                UniFi AC-Lite access point

                                I haven't lost my mind. It's around here...somewhere...

                                D 1 Reply Last reply Oct 30, 2020, 4:59 PM Reply Quote 0
                                • K
                                  kiokoman LAYER 8
                                  last edited by kiokoman Oct 30, 2020, 4:53 PM Oct 30, 2020, 4:52 PM

                                  ah from the point of view of the host
                                  https://tools.ietf.org/html/rfc8043

                                  ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                                  Please do not use chat/PM to ask for help
                                  we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                                  Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                                  D 1 Reply Last reply Oct 30, 2020, 4:55 PM Reply Quote 0
                                  • D
                                    Derelict LAYER 8 Netgate @kiokoman
                                    last edited by Oct 30, 2020, 4:55 PM

                                    @kiokoman Yeah that looks like a discussion of what I'm seeing. Thanks.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      Derelict LAYER 8 Netgate @JKnott
                                      last edited by Oct 30, 2020, 4:59 PM

                                      @JKnott You still seem to be missing the point. The RAs were received and the high-priority router was chosen as the default router as expected.

                                      The host was STILL sending traffic to off-link addresses sourced from the SLAAC address through the lower-prority router that announced the prefix for autoconf.

                                      The mechanism this routing decision was made without regard to the routing table on the host is the information I am looking for.

                                      Chattanooga, Tennessee, USA
                                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tman904
                                        last edited by Nov 2, 2020, 12:51 AM

                                        This mentions that the RA preference is associted with the default router. Do you have a default route configured?
                                        https://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/IPv6/IPv6_Router_Advertisemen.htm

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          Derelict LAYER 8 Netgate
                                          last edited by Nov 2, 2020, 10:06 AM

                                          Again, the RAs are used to set the default route. That route is installed in the routing table. The issue I saw was traffic sourced from the SLAAC address went to the "Medium" priority router that was not in the routing table while traffic sourced from the DHCP6 address went according to the routing table - or at least to the "High" priority router which is the same as the DHCP6 server.

                                          Chattanooga, Tennessee, USA
                                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                          1 Reply Last reply Reply Quote 0
                                          21 out of 24
                                          • First post
                                            21/24
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received