Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiple Router Advertisements

    Scheduled Pinned Locked Moved IPv6
    24 Posts 5 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @Derelict
      last edited by

      @Derelict said in Multiple Router Advertisements:

      RIP2?

      GEEZ NO!. RIP is obsolete. Go with OSPF these days or EIGRP if you must. The main reason for not using RIP is it has no concept of bandwidth in a hop, so it will always chose the route with the fewest hops, even if those hops support much less bandwidth than another route. Both OSPF and EIGRP consider bandwidth when determining the best route.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @kiokoman
        last edited by

        @kiokoman said in Multiple Router Advertisements:

        uhm i was searching for distance-vector algorithms and link-state algorithms
        ended up reading this

        Routing protocols have nothing to do with multiple RAs on a LAN. They are used by a router to determine the best route to another network, not the best router to use on a LAN.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate @JKnott
          last edited by

          @JKnott You still do not seem to grasp the question I am asking. I will be setting something up deliberately to test this but it will be some time before I can do it.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          JKnottJ 1 Reply Last reply Reply Quote 0
          • JKnottJ
            JKnott @Derelict
            last edited by

            @Derelict

            I thought you were talking about RAs from more than one source. Is that not correct? If so, then there are likely more than one router. If not, then you have some other issue. You even mention a rogue router in your original post. This is strictly a LAN issue, where you can have multiple routers and not a routing protocol issue, unless I have severely misread your original post.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              There is more than one router. That is known. I called it a rogue because this router should not be sending RAs and it is (breaking IPv6 connectivity for this LAB segment), which is a completely separate issue. It is the behavior of the routing done by the host receiving such RAs that is curious, not the fact that multiple routers on the network are sending RAs.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              JKnottJ 1 Reply Last reply Reply Quote 0
              • JKnottJ
                JKnott @Derelict
                last edited by

                @Derelict

                As I mentioned, the behaviour is for the receiving device to use the priority of the RA to determine which to use. However, I have no idea what happens if both RAs have the same priority. You can use Wireshark to see what the priority of a RA is.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                DerelictD 1 Reply Last reply Reply Quote 0
                • kiokomanK
                  kiokoman LAYER 8
                  last edited by kiokoman

                  ah from the point of view of the host
                  https://tools.ietf.org/html/rfc8043

                  ̿' ̿'\̵͇̿̿\з=(◕_◕)=ε/̵͇̿̿/'̿'̿ ̿
                  Please do not use chat/PM to ask for help
                  we must focus on silencing this @guest character. we must make up lies and alter the copyrights !
                  Don't forget to Upvote with the 👍 button for any post you find to be helpful.

                  DerelictD 1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate @kiokoman
                    last edited by

                    @kiokoman Yeah that looks like a discussion of what I'm seeing. Thanks.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate @JKnott
                      last edited by

                      @JKnott You still seem to be missing the point. The RAs were received and the high-priority router was chosen as the default router as expected.

                      The host was STILL sending traffic to off-link addresses sourced from the SLAAC address through the lower-prority router that announced the prefix for autoconf.

                      The mechanism this routing decision was made without regard to the routing table on the host is the information I am looking for.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • T
                        tman904
                        last edited by

                        This mentions that the RA preference is associted with the default router. Do you have a default route configured?
                        https://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/IPv6/IPv6_Router_Advertisemen.htm

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          Again, the RAs are used to set the default route. That route is installed in the routing table. The issue I saw was traffic sourced from the SLAAC address went to the "Medium" priority router that was not in the routing table while traffic sourced from the DHCP6 address went according to the routing table - or at least to the "High" priority router which is the same as the DHCP6 server.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • jimpJ
                            jimp Rebel Alliance Developer Netgate
                            last edited by

                            I don't see it in the thread yet but it's worth mentioning for others landing on this thread later that the place to look for this info is in ndp (but not yet in the pfSense GUI):

                            • ndp -r shows the router list (can flush with ndp -R)
                            • ndp -p shows the prefix list (can flush with ndp -P)
                            • ndp -I shows the default interface used when there is no default router (clear with ndp -I delete)
                            • ndp -H will harmonize the NDP router(s) info with the route table

                            That helps unravel the mystery of IPv6 behavior in unexpected/weird situations like this

                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                            Need help fast? Netgate Global Support!

                            Do not Chat/PM for help!

                            1 Reply Last reply Reply Quote 3
                            • T
                              tman904
                              last edited by

                              Thank you jimp very helpful advice.:) Sounds like that will solve Derelicts IPV6 mystery.

                              1 Reply Last reply Reply Quote 0
                              • DerelictD
                                Derelict LAYER 8 Netgate
                                last edited by

                                Still some things to examine there but yes the ndp output is what I was looking for.

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                1 Reply Last reply Reply Quote 1
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.