La Fibre

Télécom => Réseau => reseau IPv6 => Discussion démarrée par: mirtouf le 18 décembre 2020 à 22:04:34

Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 18 décembre 2020 à 22:04:34
Bonsoir,
ByTel ne m'ayant pas encore fourni un préfixe IPv6, je me résous à utiliser un tunnel HE. La configuration est simple et tout va bien pour Openwrt:
Code: [Sélectionner]
config interface 'wan6'
option proto '6in4'
option tunlink 'wan'
option mtu '1480'
option peeraddr '216.66.84.42'
option ip6addr '2001:470:1f12:4bc::1/64'
option ip6prefix '2001:470:c977::/48'
option tunnelid '611025'
option username 'derp'
option updatekey '12des41fdze4f5'Le tunnel est stable.

Ensuite je configure odhcpd:
Code: [Sélectionner]
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'en laissant les autres options par défaut (https://openwrt.org/docs/techref/odhcpd).

et ça devrait fonctionner... mais pas pour tous les clients.
Pour résumer:

Exemple d'un client Debian fonctionnel (http(s), ping, etc.) sans NM:
Code: [Sélectionner]
ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0@if15: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fde2:acdc:8af2:0:10a4:a8ff:feb7:577/64 scope global dynamic mngtmpaddr
       valid_lft forever preferred_lft forever
    inet6 2001:470:c977:0:10a4:a8ff:feb7:577/64 scope global dynamic mngtmpaddr
       valid_lft forever preferred_lft forever
    inet6 fe80::10a4:a8ff:feb7:577/64 scope link
       valid_lft forever preferred_lft forever

ip -6 r
::1 dev lo proto kernel metric 256 pref medium
2001:470:c977::/64 dev eth0 proto kernel metric 256 pref medium
fde2:acdc:8af2::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
default via fe80::5401:adff:fe4e:a759 dev eth0 proto ra metric 1024 expires 1679sec hoplimit 64 pref medium
Exemple d'un client Alpine Linux KO après quelques minutes:
Code: [Sélectionner]
ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0@if35: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1500 state UP qlen 1000
    inet6 fde2:acdc:8af2:0:1808:29ff:fedd:7edb/64 scope global dynamic
       valid_lft forever preferred_lft forever
    inet6 2001:470:c977:0:1808:29ff:fedd:7edb/64 scope global dynamic
       valid_lft forever preferred_lft forever
    inet6 fe80::1808:29ff:fedd:7edb/64 scope link
       valid_lft forever preferred_lft forever

ip -6 r
2001:470:c977::/64 dev eth0  metric 256
fde2:acdc:8af2::/64 dev eth0  metric 256
fe80::/64 dev eth0  metric 256
default via fe80::5401:adff:fe4e:a759 dev eth0  metric 1024  expires 0sec
ff00::/8 dev eth0  metric 256
Veuillez noter que si je lance un ping -6 dans une session screen, la connectivité ne saute pas.
Le fait d'avoir plusieurs comportements différents me rend perplexe.
Je soupçonne éventuellement un problème avec une variable sysctl, mais laquelle ? Les options d'adressage temporaire sont désactivées partout.

J'ai fait des captures réseau, tout le monde reçoit les RA de la part du routeur.
Avec ou sans l'ULA fournie par OpenWRT, je n'ai pas constaté de différence notable.
L'interface LAN est bridgée du côté OpenWRT.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 19 décembre 2020 à 04:27:28
Quel est le type de tes interfaces comme eth0@if35 ?
Le M-DOWN correspond à la négation d'un IFF_UP, mais je ne sais pas sur quoi.

Le client Debian qui fonctionne traite les probablement les RA dans le kernel.

NetworkManager, du moins dans certaines versions, désactive le sysctl "accept_ra", cf https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/commit/c937d6be7ad6a12006563574e69be5d2204b3956.
Il traite les RA lui-même, soit quelque chose (firewall ?) fait qu'il ne les reçoit pas, soit il a effectivement décidé de privilégier le DHCPv6, ou il est dans un état bizarre.
Tu peux faire par exemple :
Citer
nmcli general logging level TRACE domains "DHCP6 IP6 CONCHECK PLATFORM DEVICE"
Et regarder dans syslog, il devrait tracer les RA reçus, les durées de vie, etc...
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 19 décembre 2020 à 11:49:58
C'est une interface réseau d'un container sur un bridge qui inclut aussi OpenWRT (l'interface br-lan).
M-DOWN semble lié à busybox, difficile d'en savoir plus.
Pour sûr, il n'est pas présent quand la connectivité ipv6 fonctionne.

NM traite bien les RA côté userspace, j'ai pu constater que les variables sysctl sont remises à leur valeur par défaut à chaque démarrage de l'interface réseau.
Le firewall des clients NM est down tant que je ne comprends pas les échecs liés aux RA.
Effectivement ça ne va pas:
Code: [Sélectionner]
déc. 19 11:46:57 X270 NetworkManager[528]: <trace> [1608374817.0199] device[fae64316c7388528] (enp0s31f6): connectivity: [IPv6] periodic-check: re-scheduled in 299899 milliseconds (300 seconds interval)
déc. 19 11:46:57 X270 NetworkManager[528]: <trace> [1608374817.0201] device[fae64316c7388528] (enp0s31f6): connectivity: [IPv6] start check (seq:202, periodic-check)
déc. 19 11:46:57 X270 NetworkManager[528]: <debug> [1608374817.0201] connectivity: (enp0s31f6,IPv6,202) start request to 'http://www.archlinux.org/check_network_status.txt' (systemd-resolved not available)
déc. 19 11:46:57 X270 NetworkManager[528]: <debug> [1608374817.0261] connectivity: (enp0s31f6,IPv6,202) check completed: LIMITED; check failed: (7) Couldn't connect to server
déc. 19 11:46:57 X270 NetworkManager[528]: <trace> [1608374817.0263] device[fae64316c7388528] (enp0s31f6): connectivity: [Ipv6] complete check (seq:202, state:LIMITED)
déc. 19 11:46:57 X270 NetworkManager[528]: <trace> [1608374817.0264] device[fae64316c7388528] (enp0s31f6): connectivity: [IPv6] periodic-check: re-scheduled in 299893 milliseconds (300 seconds interval)
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 19 décembre 2020 à 11:51:53
Côté alpine linux, la route a un peu changé avec iproute2 installé:
Code: [Sélectionner]
ip -6 r
2001:470:c977::/64 dev eth0 proto kernel metric 256 pref medium
fde2:acdc:8af2::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
default via fe80::5401:adff:fe4e:a759 dev eth0 proto ra metric 1024 expires 1601sec mtu 1480 hoplimit 64 pref medium
mais ça saute quand même:
Code: [Sélectionner]
ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0@if35: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 fde2:acdc:8af2:0:1808:29ff:fedd:7edb/64 scope global dynamic mngtmpaddr
       valid_lft forever preferred_lft forever
    inet6 2001:470:c977:0:1808:29ff:fedd:7edb/64 scope global dynamic mngtmpaddr
       valid_lft forever preferred_lft forever
    inet6 fe80::1808:29ff:fedd:7edb/64 scope link
       valid_lft forever preferred_lft forever
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 19 décembre 2020 à 12:48:09
Citation de: mirtouf le 19 décembre 2020 à 11:49:58
Effectivement ça ne va pas:
Code: [Sélectionner]
déc. 19 11:46:57 X270 NetworkManager[528]: <trace> [1608374817.0199] device[fae64316c7388528] (enp0s31f6): connectivity: [IPv6] periodic-check: re-scheduled in 299899 milliseconds (300 seconds interval)
déc. 19 11:46:57 X270 NetworkManager[528]: <trace> [1608374817.0201] device[fae64316c7388528] (enp0s31f6): connectivity: [IPv6] start check (seq:202, periodic-check)
déc. 19 11:46:57 X270 NetworkManager[528]: <debug> [1608374817.0201] connectivity: (enp0s31f6,IPv6,202) start request to 'http://www.archlinux.org/check_network_status.txt' (systemd-resolved not available)
déc. 19 11:46:57 X270 NetworkManager[528]: <debug> [1608374817.0261] connectivity: (enp0s31f6,IPv6,202) check completed: LIMITED; check failed: (7) Couldn't connect to server
déc. 19 11:46:57 X270 NetworkManager[528]: <trace> [1608374817.0263] device[fae64316c7388528] (enp0s31f6): connectivity: [Ipv6] complete check (seq:202, state:LIMITED)
déc. 19 11:46:57 X270 NetworkManager[528]: <trace> [1608374817.0264] device[fae64316c7388528] (enp0s31f6): connectivity: [IPv6] periodic-check: re-scheduled in 299893 milliseconds (300 seconds interval)
curl n'a pas pu se connecter à www.archlinux.org, mais je ne sais pas si c'est la cause ou juste une conséquence.
Est-ce que NM trace bien les RA ?
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 19 décembre 2020 à 12:54:41
Je vais laisser de côté NM pour le moment, cela ajoute une couche supplémentaire au problème.
Il faut déjà que je comprenne pourquoi certains containers perdent la connectivité ipv6.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 19 décembre 2020 à 13:18:34
Comment les conteneurs gèrent-ils le réseau ?
Si c'est juste avec le accept_ra, ça suggère qu'ils ne reçoivent plus les RA, peut-être qu'il y a un soucis du côté du bridge.
Tu n'as pas dit comment tu te connectais au conteneur, ni si l'IPv4 fonctionnait toujours.
Est-ce que l'adresse MAC n'est pas simplement enlevée de la liste après un certain temps (ageing time à 300s) ?
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 19 décembre 2020 à 13:47:22
Non, les RA sont reçus. En installant iproute2, je vois que le compteur d'expiration ne tombe pas à 0, j'ai aussi des captures réseau:
Code: [Sélectionner]
tcpdump -nvvi eth0 icmp6
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
13:29:11.002345 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > fe80::1808:29ff:fedd:7edb: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::1808:29ff:fedd:7edb
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
13:29:11.002379 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::1808:29ff:fedd:7edb > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::1808:29ff:fedd:7edb, Flags [solicited]
13:31:16.331167 IP6 (flowlabel 0xbb865, hlim 255, next-header ICMPv6 (58) payload length: 128) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 128
hop limit 64, Flags [managed, other stateful], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  prefix info option (3), length 32 (4): fde2:acdc:8af2::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 fde2
    0x0010:  acdc 8af2 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: fde2:acdc:8af2::1
    0x0000:  0000 0000 0708 fde2 acdc 8af2 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
13:31:16.331832 IP6 (flowlabel 0xab072, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
13:31:16.331972 IP6 (flowlabel 0xab072, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fde2:acdc:8af2:0:8203:6031:f84d:83f6, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
13:31:17.332269 IP6 (flowlabel 0xab072, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
13:31:17.332705 IP6 (flowlabel 0xab072, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fde2:acdc:8af2:0:8203:6031:f84d:83f6, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
13:31:18.333927 IP6 (flowlabel 0xab072, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
13:31:18.334053 IP6 (flowlabel 0xab072, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fde2:acdc:8af2:0:8203:6031:f84d:83f6, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
13:34:35.079510 IP6 (flowlabel 0x3630b, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:815::2003: [icmp6 sum ok] ICMP6, echo request, seq 0
13:34:36.079679 IP6 (flowlabel 0x3630b, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:815::2003: [icmp6 sum ok] ICMP6, echo request, seq 1
13:34:37.079820 IP6 (flowlabel 0x3630b, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:815::2003: [icmp6 sum ok] ICMP6, echo request, seq 2
13:34:40.320745 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::1808:29ff:fedd:7edb > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::5401:adff:fe4e:a759
  source link-address option (1), length 8 (1): 1a:08:29:dd:7e:db
    0x0000:  1a08 29dd 7edb
13:34:40.320953 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::5401:adff:fe4e:a759 > fe80::1808:29ff:fedd:7edb: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::5401:adff:fe4e:a759, Flags [router, solicited]
13:34:45.322216 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > fe80::1808:29ff:fedd:7edb: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::1808:29ff:fedd:7edb
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
13:34:45.322243 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::1808:29ff:fedd:7edb > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::1808:29ff:fedd:7edb, Flags [solicited]
13:37:12.101155 IP6 (flowlabel 0x5d079, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:809::2003: [icmp6 sum ok] ICMP6, echo request, seq 0
13:37:13.101349 IP6 (flowlabel 0x5d079, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:809::2003: [icmp6 sum ok] ICMP6, echo request, seq 1
13:37:14.101473 IP6 (flowlabel 0x5d079, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:809::2003: [icmp6 sum ok] ICMP6, echo request, seq 2
13:37:17.248729 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::1808:29ff:fedd:7edb > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::5401:adff:fe4e:a759
  source link-address option (1), length 8 (1): 1a:08:29:dd:7e:db
    0x0000:  1a08 29dd 7edb
13:37:17.248891 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::5401:adff:fe4e:a759 > fe80::1808:29ff:fedd:7edb: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::5401:adff:fe4e:a759, Flags [router, solicited]
13:37:22.282067 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > fe80::1808:29ff:fedd:7edb: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::1808:29ff:fedd:7edb
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
13:37:22.282097 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::1808:29ff:fedd:7edb > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::1808:29ff:fedd:7edb, Flags [solicited]
13:37:26.791035 IP6 (flowlabel 0x1370a, hlim 64, next-header ICMPv6 (58) payload length: 64) fe80::1808:29ff:fedd:7edb > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, echo request, seq 0
13:37:26.791188 IP6 (flowlabel 0xa8f5b, hlim 64, next-header ICMPv6 (58) payload length: 64) fe80::5401:adff:fe4e:a759 > fe80::1808:29ff:fedd:7edb: [icmp6 sum ok] ICMP6, echo reply, seq 0
13:37:27.791118 IP6 (flowlabel 0x1370a, hlim 64, next-header ICMPv6 (58) payload length: 64) fe80::1808:29ff:fedd:7edb > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, echo request, seq 1
13:37:27.791274 IP6 (flowlabel 0xa8f5b, hlim 64, next-header ICMPv6 (58) payload length: 64) fe80::5401:adff:fe4e:a759 > fe80::1808:29ff:fedd:7edb: [icmp6 sum ok] ICMP6, echo reply, seq 1
13:37:28.791204 IP6 (flowlabel 0x1370a, hlim 64, next-header ICMPv6 (58) payload length: 64) fe80::1808:29ff:fedd:7edb > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, echo request, seq 2
13:37:28.791380 IP6 (flowlabel 0xa8f5b, hlim 64, next-header ICMPv6 (58) payload length: 64) fe80::5401:adff:fe4e:a759 > fe80::1808:29ff:fedd:7edb: [icmp6 sum ok] ICMP6, echo reply, seq 2
13:37:29.791290 IP6 (flowlabel 0x1370a, hlim 64, next-header ICMPv6 (58) payload length: 64) fe80::1808:29ff:fedd:7edb > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, echo request, seq 3
13:37:29.791431 IP6 (flowlabel 0xa8f5b, hlim 64, next-header ICMPv6 (58) payload length: 64) fe80::5401:adff:fe4e:a759 > fe80::1808:29ff:fedd:7edb: [icmp6 sum ok] ICMP6, echo reply, seq 3
13:37:37.610661 IP6 (flowlabel 0x81f82, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 0
13:37:38.610831 IP6 (flowlabel 0x81f82, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 1
13:37:39.610926 IP6 (flowlabel 0x81f82, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 2
13:37:40.611013 IP6 (flowlabel 0x81f82, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 3
13:37:41.611124 IP6 (flowlabel 0x81f82, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 4
13:37:42.611220 IP6 (flowlabel 0x81f82, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:1808:29ff:fedd:7edb > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 5
13:39:13.863416 IP6 (flowlabel 0xbb865, hlim 255, next-header ICMPv6 (58) payload length: 128) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 128
hop limit 64, Flags [managed, other stateful], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  prefix info option (3), length 32 (4): fde2:acdc:8af2::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 fde2
    0x0010:  acdc 8af2 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: fde2:acdc:8af2::1
    0x0000:  0000 0000 0708 fde2 acdc 8af2 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
13:39:13.864019 IP6 (flowlabel 0xab072, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
13:39:13.864254 IP6 (flowlabel 0xab072, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fde2:acdc:8af2:0:8203:6031:f84d:83f6, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
Le routeur reste pingable:
Code: [Sélectionner]
ping fe80::5401:adff:fe4e:a759 -I eth0
PING fe80::5401:adff:fe4e:a759 (fe80::5401:adff:fe4e:a759): 56 data bytes
64 bytes from fe80::5401:adff:fe4e:a759: seq=0 ttl=64 time=0.233 ms
64 bytes from fe80::5401:adff:fe4e:a759: seq=1 ttl=64 time=0.190 ms
64 bytes from fe80::5401:adff:fe4e:a759: seq=2 ttl=64 time=0.218 ms
64 bytes from fe80::5401:adff:fe4e:a759: seq=3 ttl=64 time=0.211 ms
C'est du proxmox, on a un bridge pour tous les containers.
En IPv4, tout fonctionne, cela reste stable.

Je me pose la question en effet de savoir si je n'aurais pas pris en compte d'autres mécanismes.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 19 décembre 2020 à 15:03:35
Citation de: mirtouf le 19 décembre 2020 à 13:47:22
     advertisement interval option (7), length 8 (1):  600ms
       0x0000:  0000 0000 0258
Il déclare envoyer des RA toutes les 600ms  :o, mais je vois 8 minutes d'écart (plus cohérent avec l'intervalle par défaut de 600s).
Je ne sais pas qui pourrait utiliser ça, l'option fait partie de https://tools.ietf.org/html/rfc6275 (Mobility Support in IPv6), et le kernel ne semble pas la traiter.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 19 décembre 2020 à 22:14:59
J'ai fait un diagramme Q&D pour y voir peut-être plus clair.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 19 décembre 2020 à 22:34:04
Citation de: hwti le 19 décembre 2020 à 15:03:35
Il déclare envoyer des RA toutes les 600ms  :o, mais je vois 8 minutes d'écart (plus cohérent avec l'intervalle par défaut de 600s).
Je ne sais pas qui pourrait utiliser ça, l'option fait partie de https://tools.ietf.org/html/rfc6275 (Mobility Support in IPv6), et le kernel ne semble pas la traiter.
C'est corrigé sur le master : https://github.com/openwrt/odhcpd/commit/2677fa10dc2eb455e9135ab40022ae586c651c0f
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 19 décembre 2020 à 22:41:51
Cela pourrait être la source des mes maux ?
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 19 décembre 2020 à 22:51:03
Citation de: mirtouf le 19 décembre 2020 à 22:41:51
Cela pourrait être la source des mes maux ?
Si c'est uniquement le kernel qui gère le réseau des clients posant problème, je ne pense pas.
Sinon, on pourrait avoir un démon qui s'attend à un RA toutes les 600ms, et ne les voyant pas venir finit par considérer le routeur ou le réseau comme instable, et qui réagit en expirant la route.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 19 décembre 2020 à 23:05:58
Côté openwrt j'ai ça:
Code: [Sélectionner]
ip -6 r
default from 2001:470:1f12:4bc::/64 dev 6in4-wan6 proto static metric 1024 pref medium
default from 2001:470:c977::/48 dev 6in4-wan6 proto static metric 1024 pref medium
2001:470:1f12:4bc::/64 dev 6in4-wan6 proto kernel metric 256 pref medium
2001:470:c977:0:10a4:a8ff:feb7:577 dev br-lan proto static metric 1024 pref medium
2001:470:c977:0:4c69:a4ff:fef3:2475 dev br-lan proto static metric 1024 pref medium
2001:470:c977:0:aaa1:59ff:fe3e:33fa dev br-lan proto static metric 1024 pref medium
2001:470:c977::/64 dev br-lan proto static metric 1024 pref medium
unreachable 2001:470:c977::/48 dev lo proto static metric 2147483647 error 4294967183 pref medium
fde2:acdc:8af2:0:10a4:a8ff:feb7:577 dev br-lan proto static metric 1024 pref medium
fde2:acdc:8af2::/64 dev br-lan proto static metric 1024 pref medium
unreachable fde2:acdc:8af2::/48 dev lo proto static metric 2147483647 error 4294967183 pref medium
fe80::/64 dev br-lan proto kernel metric 256 pref medium
fe80::/64 dev br-telephone proto kernel metric 256 pref medium
fe80::/64 dev eth1 proto kernel metric 256 pref medium
fe80::/64 dev eth1.100 proto kernel metric 256 pref medium
fe80::/64 dev 6in4-wan6 proto kernel metric 256 pref medium
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 22 décembre 2020 à 14:03:55
Le cœur du problème est que la passerelle finit par "oublier" certains clients quand ceux-ci n'ont pas d'activité ipv6 pendant un certain temps (ceci expliquant pourquoi Win10 ne pose pas de problème, il est "bavard" par défaut).
Du coup, je ne sais pas s'il s'agit d'un bug ou d'un comportement que l'on peut paramétrer.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 22 décembre 2020 à 15:19:38
L'autoconfiguration ne nécessite pas que la passerelle maintienne une liste de clients.
Les pings passent avec les adresses link-local, donc les adresses MAC sont bien dans la table (les échanges Neighbor Solicitation / Neighbor Advertisement fonctionnent).

A part une éventuelle gestion des règles de firewall, je ne vois pas en quoi un "oubli" des clients pourrait poser problème.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 22 décembre 2020 à 16:57:47
Quel mécanisme empêche un client de se connecter en IPv6 après une période d'inactivité ?
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 22 décembre 2020 à 17:13:24
Normalement rien, il faudrait essayer de suivre les ICMP qui sont sans réponse.
Est-ce qu'OpenWRT les reçoit, et est-ce qu'ils sont envoyés dans le tunnel ?
La route "default from 2001:470:c977::/48 dev 6in4-wan6 proto static metric 1024 pref medium" doit les y envoyer s'ils n'ont pas été bloqués.

C'est étrange d'avoir des "2001:470:c977:0:10a4:a8ff:feb7:577 dev br-lan proto static metric 1024 pref medium", alors que le "2001:470:c977::/64 dev br-lan proto static metric 1024 pref medium" est normalement suffisant pour router le paquet retour.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 22 décembre 2020 à 17:33:49
Oui, j'avais vu ça.
Je viens de trouver cela:
https://www.sami-lehtinen.net/blog/ipv6-networking-issues-icmpv6-type-130-multicast-listener-discovery-mld
je vais investiguer.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 22 décembre 2020 à 17:42:47
Tu peux regarder les "ip -6 neigh" des deux côtés.
Puisque le client arrive à envoyer un ping, il a normalement toujours l'adresse link-local du routeur dans sa table.
La question serait plutôt pour le retour, le routeur doit pouvoir déterminer l'adresse MAC associée à l'IPv6 publique du client.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 22 décembre 2020 à 17:54:00
Côté openwrt j'ai ça:
Code: [Sélectionner]
ip -6 neigh
fe80::90a0:27ff:feb8:b7f0 dev br-lan lladdr 92:a0:27:b8:b7:f0 STALE
fe80::1808:29ff:fedd:7edb dev br-lan lladdr 1a:08:29:dd:7e:db REACHABLE
2001:470:c977:0:90a0:27ff:feb8:b7f0 dev br-lan lladdr 92:a0:27:b8:b7:f0 REACHABLE
2001:470:c977:0:10a4:a8ff:feb7:577 dev br-lan lladdr 12:a4:a8:b7:05:77 REACHABLE
2001:470:c977:0:ac06:d0ff:fe9e:3965 dev br-lan lladdr ae:06:d0:9e:39:65 REACHABLE
2001:470:c977:0:1808:29ff:fedd:7edb dev br-lan lladdr 1a:08:29:dd:7e:db REACHABLE
2001:470:c977:0:aaa1:59ff:fe3e:33fa dev br-lan lladdr a8:a1:59:3e:33:fa router REACHABLE
2001:470:c977:0:4c69:a4ff:fef3:2475 dev br-lan lladdr 4e:69:a4:f3:24:75 DELAY
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: hwti le 22 décembre 2020 à 18:23:58
rien d'anormal

Il faudrait faire une capture côté openwrt, sur br-lan et 6in4-wan6.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 22 décembre 2020 à 18:34:25
Oui, c'est en cours.
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 03 janvier 2021 à 21:22:46
OpenWRT envoie des RA soit à la demande soit via le multicast:
Code: [Sélectionner]
20:42:27.606028 IP6 (flowlabel 0x39cca, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > fe80::48e5:c3ff:fee6:595b: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
20:44:33.584942 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
20:54:27.628052 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
21:02:00.996593 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
21:08:13.437746 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
21:15:49.252871 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
[code]
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 03 janvier 2021 à 21:24:17
La 1ère VM perd la connexion IPv6 au bout d'un certain temps bien que les RA soient reçus sans action de ma part:
Code: [Sélectionner]
20:53:32.966110 IP6 (flowlabel 0x0f104, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:90a0:27ff:feb8:b7f0 > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 0
20:53:32.970402 IP6 (flowlabel 0x0f104, hlim 120, next-header ICMPv6 (58) payload length: 64) 2a00:1450:4007:80a::2003 > 2001:470:c977:0:90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, echo reply, seq 0
20:53:33.966180 IP6 (flowlabel 0x0f104, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:90a0:27ff:feb8:b7f0 > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 1
20:53:33.970300 IP6 (flowlabel 0x0f104, hlim 120, next-header ICMPv6 (58) payload length: 64) 2a00:1450:4007:80a::2003 > 2001:470:c977:0:90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, echo reply, seq 1
20:53:37.995076 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > 2001:470:c977:0:90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2001:470:c977:0:90a0:27ff:feb8:b7f0
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
20:53:37.995106 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) 2001:470:c977:0:90a0:27ff:feb8:b7f0 > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is 2001:470:c977:0:90a0:27ff:feb8:b7f0, Flags [solicited]
20:53:38.136667 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::90a0:27ff:feb8:b7f0 > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::5401:adff:fe4e:a759
  source link-address option (1), length 8 (1): 92:a0:27:b8:b7:f0
    0x0000:  92a0 27b8 b7f0
20:53:38.136823 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::5401:adff:fe4e:a759 > fe80::90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::5401:adff:fe4e:a759, Flags [router, solicited]
20:53:43.185126 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > fe80::90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::90a0:27ff:feb8:b7f0
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
20:53:43.185145 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::90a0:27ff:feb8:b7f0 > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::90a0:27ff:feb8:b7f0, Flags [solicited]
20:54:27.629631 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
20:54:27.629986 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
20:54:27.638874 IP6 (hlim 1, next-header Options (0) payload length: 136) fe80::ac06:d0ff:fe9e:3965 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 6 group record(s) [gaddr ff02::1:ffb0:6ad to_ex { }] [gaddr ff02::1:ff1b:69fe to_ex { }] [gaddr ff02::fb to_ex { }] [gaddr ff02::1:3 to_ex { }] [gaddr ff02::c to_ex { }] [gaddr ff02::1:ff9e:3965 to_ex { }]
20:54:27.640699 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::48e5:c3ff:fee6:595b > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::202 to_ex { }] [gaddr ff02::1:ffe6:595b to_ex { }]
20:54:27.640701 IP6 (hlim 1, next-header Options (0) payload length: 76) fe80::b098:84ff:fe8b:8247 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:ff05:eceb to_ex { }] [gaddr ff02::1:ff34:870e to_ex { }] [gaddr ff02::1:ff8b:8247 to_ex { }]
20:54:27.866830 IP6 (hlim 1, next-header Options (0) payload length: 136) fe80::ac06:d0ff:fe9e:3965 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 6 group record(s) [gaddr ff02::1:ffb0:6ad to_ex { }] [gaddr ff02::1:ff1b:69fe to_ex { }] [gaddr ff02::fb to_ex { }] [gaddr ff02::1:3 to_ex { }] [gaddr ff02::c to_ex { }] [gaddr ff02::1:ff9e:3965 to_ex { }]
20:54:28.248950 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::48e5:c3ff:fee6:595b > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::202 to_ex { }] [gaddr ff02::1:ffe6:595b to_ex { }]
20:54:28.536692 IP6 (hlim 1, next-header Options (0) payload length: 76) fe80::b098:84ff:fe8b:8247 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:ff05:eceb to_ex { }] [gaddr ff02::1:ff34:870e to_ex { }] [gaddr ff02::1:ff8b:8247 to_ex { }]
20:54:28.631506 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
20:54:29.632544 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
20:55:03.485616 IP6 (flowlabel 0x0f104, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:90a0:27ff:feb8:b7f0 > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 0
20:55:03.530504 IP6 (flowlabel 0x0f104, hlim 120, next-header ICMPv6 (58) payload length: 64) 2a00:1450:4007:80a::2003 > 2001:470:c977:0:90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, echo reply, seq 0
20:55:04.485751 IP6 (flowlabel 0x0f104, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:90a0:27ff:feb8:b7f0 > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 1
20:55:04.490077 IP6 (flowlabel 0x0f104, hlim 120, next-header ICMPv6 (58) payload length: 64) 2a00:1450:4007:80a::2003 > 2001:470:c977:0:90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, echo reply, seq 1
20:55:08.504667 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::90a0:27ff:feb8:b7f0 > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::5401:adff:fe4e:a759
  source link-address option (1), length 8 (1): 92:a0:27:b8:b7:f0
    0x0000:  92a0 27b8 b7f0
20:55:08.504823 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::5401:adff:fe4e:a759 > fe80::90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::5401:adff:fe4e:a759, Flags [router, solicited]
20:55:08.545113 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > 2001:470:c977:0:90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2001:470:c977:0:90a0:27ff:feb8:b7f0
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
20:55:08.545145 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) 2001:470:c977:0:90a0:27ff:feb8:b7f0 > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is 2001:470:c977:0:90a0:27ff:feb8:b7f0, Flags [solicited]
20:55:12.545176 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
20:55:13.505150 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > fe80::90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::90a0:27ff:feb8:b7f0
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
20:55:13.505181 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::90a0:27ff:feb8:b7f0 > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::90a0:27ff:feb8:b7f0, Flags [solicited]
20:57:20.555154 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
20:59:28.545264 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:01:36.545262 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:02:00.998307 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
21:02:01.000562 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
21:02:01.006995 IP6 (hlim 1, next-header Options (0) payload length: 136) fe80::ac06:d0ff:fe9e:3965 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 6 group record(s) [gaddr ff02::1:ffb0:6ad to_ex { }] [gaddr ff02::1:ff1b:69fe to_ex { }] [gaddr ff02::fb to_ex { }] [gaddr ff02::1:3 to_ex { }] [gaddr ff02::c to_ex { }] [gaddr ff02::1:ff9e:3965 to_ex { }]
21:02:01.008723 IP6 (hlim 1, next-header Options (0) payload length: 76) fe80::b098:84ff:fe8b:8247 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:ff05:eceb to_ex { }] [gaddr ff02::1:ff34:870e to_ex { }] [gaddr ff02::1:ff8b:8247 to_ex { }]
21:02:01.012709 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::48e5:c3ff:fee6:595b > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::202 to_ex { }] [gaddr ff02::1:ffe6:595b to_ex { }]
21:02:01.264701 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::48e5:c3ff:fee6:595b > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::202 to_ex { }] [gaddr ff02::1:ffe6:595b to_ex { }]
21:02:01.306973 IP6 (hlim 1, next-header Options (0) payload length: 136) fe80::ac06:d0ff:fe9e:3965 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 6 group record(s) [gaddr ff02::1:ffb0:6ad to_ex { }] [gaddr ff02::1:ff1b:69fe to_ex { }] [gaddr ff02::fb to_ex { }] [gaddr ff02::1:3 to_ex { }] [gaddr ff02::c to_ex { }] [gaddr ff02::1:ff9e:3965 to_ex { }]
21:02:01.368702 IP6 (hlim 1, next-header Options (0) payload length: 76) fe80::b098:84ff:fe8b:8247 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:ff05:eceb to_ex { }] [gaddr ff02::1:ff34:870e to_ex { }] [gaddr ff02::1:ff8b:8247 to_ex { }]
21:02:02.002583 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
21:02:03.003649 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
21:02:47.747628 IP6 (flowlabel 0x695f1, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:90a0:27ff:feb8:b7f0 > 2a00:1450:4007:815::2003: [icmp6 sum ok] ICMP6, echo request, seq 0
21:02:48.747768 IP6 (flowlabel 0x695f1, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:90a0:27ff:feb8:b7f0 > 2a00:1450:4007:815::2003: [icmp6 sum ok] ICMP6, echo request, seq 1
21:02:52.888669 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::90a0:27ff:feb8:b7f0 > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::5401:adff:fe4e:a759
  source link-address option (1), length 8 (1): 92:a0:27:b8:b7:f0
    0x0000:  92a0 27b8 b7f0
21:02:52.888823 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::5401:adff:fe4e:a759 > fe80::90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::5401:adff:fe4e:a759, Flags [router, solicited]
21:02:57.905237 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > fe80::90a0:27ff:feb8:b7f0: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::90a0:27ff:feb8:b7f0
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
21:02:57.905270 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::90a0:27ff:feb8:b7f0 > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::90a0:27ff:feb8:b7f0, Flags [solicited]
21:03:44.545307 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:05:52.555294 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:08:00.555437 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:08:13.439548 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
21:08:13.439950 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
Titre: Tunnel IPv6 HE + Openwrt + SLAAC = panique sur le LAN
Posté par: mirtouf le 03 janvier 2021 à 21:25:47
La 2nde VM ne perd pas la connectivité IPv6:
Code: [Sélectionner]
20:53:04.555091 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
20:54:21.618780 IP6 (flowlabel 0x2f414, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:48e5:c3ff:fee6:595b > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 1
20:54:22.648721 IP6 (flowlabel 0x2f414, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:48e5:c3ff:fee6:595b > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 2
20:54:23.672699 IP6 (flowlabel 0x2f414, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:48e5:c3ff:fee6:595b > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 3
20:54:24.696706 IP6 (flowlabel 0x2f414, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:48e5:c3ff:fee6:595b > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 4
20:54:26.776669 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::48e5:c3ff:fee6:595b > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::5401:adff:fe4e:a759
  source link-address option (1), length 8 (1): 4a:e5:c3:e6:59:5b
    0x0000:  4ae5 c3e6 595b
20:54:26.776877 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::5401:adff:fe4e:a759 > fe80::48e5:c3ff:fee6:595b: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::5401:adff:fe4e:a759, Flags [router, solicited]
20:54:27.629704 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
20:54:27.630015 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
20:54:27.638921 IP6 (hlim 1, next-header Options (0) payload length: 136) fe80::ac06:d0ff:fe9e:3965 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 6 group record(s) [gaddr ff02::1:ffb0:6ad to_ex { }] [gaddr ff02::1:ff1b:69fe to_ex { }] [gaddr ff02::fb to_ex { }] [gaddr ff02::1:3 to_ex { }] [gaddr ff02::c to_ex { }] [gaddr ff02::1:ff9e:3965 to_ex { }]
20:54:27.640668 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::48e5:c3ff:fee6:595b > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::202 to_ex { }] [gaddr ff02::1:ffe6:595b to_ex { }]
20:54:27.640730 IP6 (hlim 1, next-header Options (0) payload length: 76) fe80::b098:84ff:fe8b:8247 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:ff05:eceb to_ex { }] [gaddr ff02::1:ff34:870e to_ex { }] [gaddr ff02::1:ff8b:8247 to_ex { }]
20:54:27.866872 IP6 (hlim 1, next-header Options (0) payload length: 136) fe80::ac06:d0ff:fe9e:3965 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 6 group record(s) [gaddr ff02::1:ffb0:6ad to_ex { }] [gaddr ff02::1:ff1b:69fe to_ex { }] [gaddr ff02::fb to_ex { }] [gaddr ff02::1:3 to_ex { }] [gaddr ff02::c to_ex { }] [gaddr ff02::1:ff9e:3965 to_ex { }]
20:54:28.248669 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::48e5:c3ff:fee6:595b > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::202 to_ex { }] [gaddr ff02::1:ffe6:595b to_ex { }]
20:54:28.536731 IP6 (hlim 1, next-header Options (0) payload length: 76) fe80::b098:84ff:fe8b:8247 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:ff05:eceb to_ex { }] [gaddr ff02::1:ff34:870e to_ex { }] [gaddr ff02::1:ff8b:8247 to_ex { }]
20:54:28.631549 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
20:54:29.632596 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
20:54:31.364640 IP6 (flowlabel 0x2f414, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:48e5:c3ff:fee6:595b > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 1
20:54:31.369033 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1:ffe6:595b: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2001:470:c977:0:48e5:c3ff:fee6:595b
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
20:54:31.369060 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2001:470:c977:0:48e5:c3ff:fee6:595b > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:48e5:c3ff:fee6:595b, Flags [solicited, override]
  destination link-address option (2), length 8 (1): 4a:e5:c3:e6:59:5b
    0x0000:  4ae5 c3e6 595b
20:54:31.369142 IP6 (flowlabel 0x2f414, hlim 120, next-header ICMPv6 (58) payload length: 64) 2a00:1450:4007:80a::2003 > 2001:470:c977:0:48e5:c3ff:fee6:595b: [icmp6 sum ok] ICMP6, echo reply, seq 1
20:54:31.825115 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > fe80::48e5:c3ff:fee6:595b: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::48e5:c3ff:fee6:595b
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
20:54:31.825149 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::48e5:c3ff:fee6:595b > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::48e5:c3ff:fee6:595b, Flags [solicited]
20:54:32.366494 IP6 (flowlabel 0x2f414, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:48e5:c3ff:fee6:595b > 2a00:1450:4007:80a::2003: [icmp6 sum ok] ICMP6, echo request, seq 2
20:54:32.371032 IP6 (flowlabel 0x2f414, hlim 120, next-header ICMPv6 (58) payload length: 64) 2a00:1450:4007:80a::2003 > 2001:470:c977:0:48e5:c3ff:fee6:595b: [icmp6 sum ok] ICMP6, echo reply, seq 2
20:55:12.545192 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
20:57:20.555178 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
20:59:28.545277 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:01:36.545293 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:02:00.998391 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
21:02:01.000615 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
21:02:01.007043 IP6 (hlim 1, next-header Options (0) payload length: 136) fe80::ac06:d0ff:fe9e:3965 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 6 group record(s) [gaddr ff02::1:ffb0:6ad to_ex { }] [gaddr ff02::1:ff1b:69fe to_ex { }] [gaddr ff02::fb to_ex { }] [gaddr ff02::1:3 to_ex { }] [gaddr ff02::c to_ex { }] [gaddr ff02::1:ff9e:3965 to_ex { }]
21:02:01.008772 IP6 (hlim 1, next-header Options (0) payload length: 76) fe80::b098:84ff:fe8b:8247 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:ff05:eceb to_ex { }] [gaddr ff02::1:ff34:870e to_ex { }] [gaddr ff02::1:ff8b:8247 to_ex { }]
21:02:01.012669 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::48e5:c3ff:fee6:595b > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::202 to_ex { }] [gaddr ff02::1:ffe6:595b to_ex { }]
21:02:01.264667 IP6 (hlim 1, next-header Options (0) payload length: 56) fe80::48e5:c3ff:fee6:595b > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 2 group record(s) [gaddr ff02::202 to_ex { }] [gaddr ff02::1:ffe6:595b to_ex { }]
21:02:01.307011 IP6 (hlim 1, next-header Options (0) payload length: 136) fe80::ac06:d0ff:fe9e:3965 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 6 group record(s) [gaddr ff02::1:ffb0:6ad to_ex { }] [gaddr ff02::1:ff1b:69fe to_ex { }] [gaddr ff02::fb to_ex { }] [gaddr ff02::1:3 to_ex { }] [gaddr ff02::c to_ex { }] [gaddr ff02::1:ff9e:3965 to_ex { }]
21:02:01.368740 IP6 (hlim 1, next-header Options (0) payload length: 76) fe80::b098:84ff:fe8b:8247 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:ff05:eceb to_ex { }] [gaddr ff02::1:ff34:870e to_ex { }] [gaddr ff02::1:ff8b:8247 to_ex { }]
21:02:02.002634 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
21:02:03.003699 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247
21:02:03.984580 IP6 (flowlabel 0xe612b, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:48e5:c3ff:fee6:595b > 2a00:1450:4007:815::2003: [icmp6 sum ok] ICMP6, echo request, seq 1
21:02:03.989205 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1:ffe6:595b: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2001:470:c977:0:48e5:c3ff:fee6:595b
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
21:02:03.989224 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2001:470:c977:0:48e5:c3ff:fee6:595b > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:48e5:c3ff:fee6:595b, Flags [solicited, override]
  destination link-address option (2), length 8 (1): 4a:e5:c3:e6:59:5b
    0x0000:  4ae5 c3e6 595b
21:02:03.989328 IP6 (flowlabel 0xe612b, hlim 120, next-header ICMPv6 (58) payload length: 64) 2a00:1450:4007:815::2003 > 2001:470:c977:0:48e5:c3ff:fee6:595b: [icmp6 sum ok] ICMP6, echo reply, seq 1
21:02:04.985702 IP6 (flowlabel 0xe612b, hlim 64, next-header ICMPv6 (58) payload length: 64) 2001:470:c977:0:48e5:c3ff:fee6:595b > 2a00:1450:4007:815::2003: [icmp6 sum ok] ICMP6, echo request, seq 2
21:02:04.990252 IP6 (flowlabel 0xe612b, hlim 120, next-header ICMPv6 (58) payload length: 64) 2a00:1450:4007:815::2003 > 2001:470:c977:0:48e5:c3ff:fee6:595b: [icmp6 sum ok] ICMP6, echo reply, seq 2
21:02:09.112668 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::48e5:c3ff:fee6:595b > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::5401:adff:fe4e:a759
  source link-address option (1), length 8 (1): 4a:e5:c3:e6:59:5b
    0x0000:  4ae5 c3e6 595b
21:02:09.113000 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::5401:adff:fe4e:a759 > fe80::48e5:c3ff:fee6:595b: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::5401:adff:fe4e:a759, Flags [router, solicited]
21:02:14.145228 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::5401:adff:fe4e:a759 > fe80::48e5:c3ff:fee6:595b: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::48e5:c3ff:fee6:595b
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
21:02:14.145259 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) fe80::48e5:c3ff:fee6:595b > fe80::5401:adff:fe4e:a759: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is fe80::48e5:c3ff:fee6:595b, Flags [solicited]
21:03:44.545318 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:05:52.555315 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:08:00.555466 IP6 (hlim 1, next-header Options (0) payload length: 32) fe80::5401:adff:fe4e:a759 > ff02::1: HBH (rtalert: 0x0000) (pad1)(pad1) [icmp6 sum ok] ICMP6, multicast listener querymax resp delay: 10000 addr: ::
21:08:13.439634 IP6 (flowlabel 0xa9a1b, hlim 255, next-header ICMPv6 (58) payload length: 96) fe80::5401:adff:fe4e:a759 > ff02::1: [icmp6 sum ok] ICMP6, router advertisement, length 96
hop limit 64, Flags [none], pref medium, router lifetime 1800s, reachable time 0ms, retrans timer 0ms
  source link-address option (1), length 8 (1): 56:01:ad:4e:a7:59
    0x0000:  5601 ad4e a759
  mtu option (5), length 8 (1):  1480
    0x0000:  0000 0000 05c8
  prefix info option (3), length 32 (4): 2001:470:c977::/64, Flags [onlink, auto], valid time infinity, pref. time infinity
    0x0000:  40c0 ffff ffff ffff ffff 0000 0000 2001
    0x0010:  0470 c977 0000 0000 0000 0000 0000
  rdnss option (25), length 24 (3):  lifetime 1800s, addr: 2001:470:c977::1
    0x0000:  0000 0000 0708 2001 0470 c977 0000 0000
    0x0010:  0000 0000 0001
  advertisement interval option (7), length 8 (1):  600ms
    0x0000:  0000 0000 0258
21:08:13.439984 IP6 (flowlabel 0xf69c8, hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::bc69:42c4:9434:870e > ff02::1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2001:470:c977:0:e5a8:7072:8d05:eceb, Flags [override]
  destination link-address option (2), length 8 (1): b2:98:84:8b:82:47
    0x0000:  b298 848b 8247