Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RFC 3041 addresses reported as MgmtIP #521

Closed
0n-s opened this issue Jul 6, 2022 · 1 comment
Closed

RFC 3041 addresses reported as MgmtIP #521

0n-s opened this issue Jul 6, 2022 · 1 comment
Labels

Comments

@0n-s
Copy link

0n-s commented Jul 6, 2022

Bug description

RFC 3041 (also known as IPv6 privacy extensions, not to be confused with stable privacy addresses...which also officially have "Privacy Extensions" in their name, sigh) addresses are selected by lldpd to advertise an IPv6 MgmtIP. This should not happen, as these addresses are mainly for outgoing connections (correct me if I'm wrong), & are not stable.

Steps to reproduce the problem

(Linux instructions)

  1. sysctl -w net.ipv6.conf.eth0.use_tempaddr = 2 (enables Privacy Extensions for eth0)
  2. wait for a temporary address to show up on the interface, like (output from ip -6 addr):
inet6 2001:db8:0:1:8992:3c03:d6e2:ed72/64 scope global temporary dynamic
   valid_lft 32258sec preferred_lft 5157sec

(note the temporary tag)
3. tell lldpd to send an LLDPDU to the network.

Expected outcome

lldpd should ignore addresses with the temporary property in its IP address autoselection.

NB: temporary addresses are necessarily mangled from stable addresses; therefore, if there were temporary addresses, there are stable addresses to fall back onto; see the output of ip -6 addr show primary. In any situation where lldpd automatically found an IPv6 MgmtIP currently, it will continue to be able to do so even if it ignores all temporary addresses.

Current outcome

Unless the management IP is overriden with -m, lldpd will in all likelihood select the current temporary address, since in the ip -6 addr listing temporary addresses come 1st, then public addresses.

@0n-s 0n-s added the bug label Jul 6, 2022
@vincentbernat
Copy link
Member

Thanks. This should be fixed in db5c708.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants