View source for Non-Local IPv6 Router Advertisement

IPv6 uses router advertisements (part of the Neighbour Discovery protocol of ICMPv6) to announce the default gateway. Hosts send a ''router solicitation'' message, and routers respond with a ''router advertisement'' message. This is unlike IPv4 where gateways are typically specified as part of the DHCP messages. Another difference is that IPv6 router advertisements use multicast (IPv6 <tt>ff02::1</tt> and MAC address <tt>33:33:00:00:00:01</tt> for router advertisements; IPv6 <tt>ff02::2</tt> and MAC address <tt>33:33:00:00:00:02</tt> for router solicitations).

==Link-local addresses==

Another striking feature of IPv6 is that is uses link-local IP addresses for local communication. Since neighbour discovery is local in scope, this means that the router sends the router solicitation with a link-local IPv6 ad the source address.

[http://tools.ietf.org/html/rfc4861#section-4.2 RFC 4861] explicitly states:
: [The] Source Address '''must''' be the link-local address assigned to the interface from which this message is sent."

By default, a host stores the source IP address and source MAC address in the routing table. Hence, you will see IPv6 link local addresses in the IPv6 routing table:

 % netstat -rn -f inet6
 Destination        Gateway                         Flags       Netif
 default            fe80::200:24ff:fece:69ef%en0    UGcI        eth0
 ::1                link#1                          UHL         lo0
 ....

This is unlike what most users expect. For example, if the host has IPv6 address <tt>2001:0db8:637:2a:200:26ff:fea3:817d</tt>, most users would expect <tt>2001:0db8:637:2a::1</tt> as the gateway:

 % netstat -rn -f inet6
 Destination        Gateway                         Flags       Netif
 default            2001:0db8:637:2a::1%eth0        UGcI        eth0
 ::1                link#1                          UHL         lo0
 ....

In reality, the IPv6 address of the gateway is irrelevant, as a packet on the wire would only contain the MAC destination address of the gateway. The IPv6 destination address contains the address of the final destination, not of the gateway.

==Specify Global IPv6 Address for the Gateway==

For easier debugging, network administrators may prefer to see a global IPv6 address as the gateway in hosts, instead of a link-local IPv6 address. Technically, it is possible to accomplish this in two ways.

* Disable link-local IPv6 addresses on the gateway. This is '''not recommended'''.
* Use the global scope IPv6 address in the router advertisement

The recommended method is to use the ''radvd'' (thus not ''rtadvd'') router advertisement daemon, and set the parameter:
 AdvRouterAddr on;

Unfortunately, not all clients support this option.

===Disable link-local IPv6 addresses on the gateway===

An interface typically has one IPv4 address, but multiple IPv6 addresses. Consider the following example:

 en0: flags=8963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
     options=27<RXCSUM,TXCSUM,VLAN_MTU,TSO4>
     ether 00:23:df:97:90:38
     inet 192.0.2.3 netmask 0xffffff00 broadcast 192.0.2.255
     inet6 2001:db8:637:2a::3 prefixlen 64
     inet6 2001:db8:637:2a:223:dfff:fe97:9038 prefixlen 64 autoconf
     inet6 2001:db8:637:2a:acfe:e43b:2c35:d387 prefixlen 64 autoconf temporary
     inet6 fe80::223:dfff:fe97:9038%en0 prefixlen 64 scopeid 0x4

This host has four IPv6 addresses:
* A manually configured or DHCPv6 assigned address (<tt>2001:db8:637:2a::3</tt>)
* A SLAAC (Stateless Address Auto Configuration) address based on the router advertisement and the MAC address of the interface (this can be identified by the <tt>ff:fe</tt> part of the IPv6 address: <tt>2001:db8:637:2a:223:dfff:fe97:9038 </tt>). Note that SLAAC is enabled in the kernel by default. Unlike IPv4 DHCP which need to be specifically enabled, SLAAC is always configured if the server receives an router advertisement.
* An temporary address, automatically configured based on the router advertisement, but not based on the MAC address for enhanced privacy (<tt>2001:db8:637:2a:acfe:e43b:2c35:d387</tt>)
* A link-local address based on the MAC address and interface name (recognisable by the <tt>fe80</tt> prefix and the interface appendix after the <tt>%</tt> sign: <tt>fe80::223:dfff:fe97:9038%en0</tt>)

You can disable respectively SLAAC and link-local address with the following kernel parameters.

For Linux kernels:
 sysctl net.ipv6.conf.all.accept_ra_defrtr=0
 sysctl net.ipv6.conf.default.accept_ra_defrtr=0
 sysctl net.ipv6.conf.all.autoconf=0
 sysctl net.ipv6.conf.default.autoconf=0

For BSD kernels:
 sysctl net.inet6.ip6.accept_rtadv=0
 sysctl net.inet6.ip6.auto_linklocal=0

For my FreeBSD 9.0 host, setting <tt>auto_linklocal</tt> to <tt>0</tt> had no effect. In addition, the [http://www.freebsd.org/cgi/man.cgi?query=ifconfig&sektion=8 man page for ifconfig] explicitly states that removing the link-local IPv6 address may result in unexpected behaviour. Hence, I recommend to leave the link-local interfaces in place, and configure the router advertisement daemon, as described in the next section.

===Use global scope IPv6 address in the router advertisement===

Let's dive into the actual router advertisement message for a minute.

{| style="background-color:#ffffff; border-collapse: collapse;" cellpadding="1" cellspacing="0" border="1"
|  ||  || &nbsp;0&nbsp; || &nbsp;1&nbsp; || &nbsp;2&nbsp; || &nbsp;3&nbsp; || &nbsp;4&nbsp; || &nbsp;5&nbsp; || &nbsp;6&nbsp; || &nbsp;7&nbsp; 
|| &nbsp;8&nbsp; || &nbsp;9&nbsp; || &nbsp;A&nbsp; || &nbsp;B&nbsp; || &nbsp;C&nbsp; || &nbsp;D&nbsp; || &nbsp;E&nbsp; || &nbsp;F&nbsp;
|-
|rowspan="11"| Ethernet header || 0 ||colspan="16" rowspan="4" style="background-color:#ffffcc;"| preamble
|-
| 2 
|-
| 4 
|-
| 6 
|-
| 8 ||colspan="16" rowspan="3" style="background-color:#ffffcc;"| destination MAC
|-
|10 
|-
|12 
|-
|14 ||colspan="16" rowspan="3" style="background-color:#ffffcc;"| source MAC
|-
|16 
|-
|18 
|-
|20 ||colspan="16" style="background-color:#ffffcc;"| type
|-
|
|-
|rowspan="20"| IP header ||22 ||colspan="4" style="background-color:#ccffcc;"| version   ||colspan="8" style="background-color:#ccffcc;"|traffic class  ||colspan="4" style="background-color:#ccffcc;"|flow ...
|-
|24 ||colspan="16" style="background-color:#ccffcc;"|  .. label
|-
|26 ||colspan="16" style="background-color:#ccffcc;"| payload length
|-
|28 ||colspan="8" style="background-color:#ccffcc;"| next header||colspan="8" style="background-color:#ccffcc;"|hop limit
|-
|30 ||colspan="16" rowspan="8" style="background-color:#ccffcc;"| source IP
|-
|32 
|-
|34 
|-
|36 
|-
|38 
|-
|40 
|-
|42 
|-
|44 
|-
|46 ||colspan="16" rowspan="8" style="background-color:#ccffcc;"| destination IP
|-
|48 
|-
|50 
|-
|52 
|-
|54 
|-
|56 
|-
|58 
|-
|60 
|-
|
|-
|rowspan="8"| ICMPv6 Router Advertisement header ||62 ||colspan="8" style="background-color:#ccccff;"| Type (134 = RA)||colspan="8" style="background-color:#ccccff;"|Code
|-
|64 ||colspan="16" style="background-color:#ccccff;"| Checksum
|-
|66 ||colspan="8" style="background-color:#ccccff;"| hop limit      ||colspan="8" style="background-color:#ccccff;"|flags
|-
|68 ||colspan="16" style="background-color:#ccccff;"| router lifetime
|-
|70 ||colspan="16" rowspan="2" style="background-color:#ccccff;"| reachable time
|-
|72 
|-
|74 ||colspan="16" rowspan="2" style="background-color:#ccccff;"| retrans timer
|-
|76 
|-
|
|-
|rowspan="4"| Link-layer option ||78 ||colspan="8" style="background-color:#ffccff;"| type (1=link layer)||colspan="8" style="background-color:#ffccff;"|length (1 = 8 bytes)
|-
|80 ||colspan="16" rowspan="3" style="background-color:#ffccff;"| source MAC
|-
|82 
|-
|84 
|-
|
|-
|rowspan="14"| Prefix option ||86 ||colspan="8" style="background-color:#ffcccc;"| type (3=prefix)||colspan="8" style="background-color:#ffcccc;"|length (4 = 32 bytes)
|-
|88 ||colspan="8" style="background-color:#ffcccc;"| prefix length  ||style="background-color:#ffcccc;"| L ||style="background-color:#ffcccc;"| A ||style="background-color:#ffcccc;"| R ||colspan="5" style="background-color:#ffcccc;"|reserved
|-
|90 ||colspan="16" rowspan="2" style="background-color:#ffcccc;"| valid lifetime
|-
|92 
|-
|94 ||colspan="16" rowspan="2" style="background-color:#ffcccc;"| reserved
|-
|96 
|-
|98 ||colspan="16" rowspan="8" style="background-color:#ffcccc;"| prefix IP
|-
|100
|-
|100
|-
|102
|-
|104
|-
|106
|-
|108
|-
|110
|-
|
|-
|rowspan="2"| Ethernet footer ||112||colspan="16" rowspan="2" style="background-color:#ffffcc;"| Checksum
|-
|114
|}

As you can see, a router advertisement contains two options: one to specify the router MAC address and one to specify the IP prefix of the subnet.

The original specification ([http://tools.ietf.org/html/rfc4861#section-4.6.2 RFC 4861]) of the Prefix Information only specified two flags:
;L:on-link flag.
;A:autonomous address-configuration flag. Specifies that the prefix can be used for stateless auto-configuration.

This original specification did not contain the IP address of the router. That had to be derived from the source IP address in the IPv6 header. This IP address is usually the link-local IPv6 address, since the IPv6 specifies that in these (link-local) communications, a local scope IP address should be used.

The specification was later changed (in [http://tools.ietf.org/html/rfc6275#section-7.2 RFC 6275]) to include a third flag:

;R:router address flag. Signals that the prefix IP contains the complete IP address assigned to the sending router.

If this is set, the host can use the global IP address of the router instead of the link-local IP address.

The [http://www.litech.org/radvd/ radvd software], distributed with Linux, can set the R flag using the <tt>AdvRouterAddr on</tt>. Be sure to set the global IP address of the router in the <tt>prefix</tt> field:

 % cat /etc/radvd.conf 
 interface eth0
 {
      AdvSendAdvert on;
      AdvManagedFlag off;
      AdvOtherConfigFlag off;
      prefix 2001:0db8:637:2a::1/64
      {
          AdvOnLink on;
          AdvAutonomous on;
          AdvRouterAddr on;
      };
 };

The [http://www.freebsd.org/cgi/man.cgi?query=rtadvd rtadvd software], distributed with BSD, is not able to set the R flag, even though it is able to set the prefix to the router IP.

The following two configuration settings '''do not work'''. rtadvd specified the IP prefix flags in the <tt>pinfoflags</tt> field. Note that this field does not understand hexadecimal, though it does understand letter flags (L + A + R = 0x80 + 0x40 + 0x20 = 0xE0 = 224).

 % cat /etc/rtadvd.conf 
 eth0:\
     :addr="2001:0db8:637:2a::1":prefixlen#64:pinfoflags#224:

 % cat /etc/rtadvd.conf 
 eth0:\
     :addr="2001:0db8:637:2a::1":prefixlen#64:pinfoflags="lar":
(in both cases, the L and A flag are set, but the R flag is unset on FreeBSD 9.0)

If you run FreeBSD, and like to see the global IPv6 address in router advertisements, I recommend to install the radvd package.

There is also [http://docstore.mik.ua/manuals/hp-ux/en/B2355-60130/rtradvd.1M.html rtadvd software] written by HP, which is unrelated to the rtadvd software above (which was written in the KAME project). I have not tested the HP software.

Even if the router IPv6 address is advertised, not all clients support this feature. For example, Mac OS X.7 still uses the link-local address.


[[Category:Network Configuration]]
[[Category:IPv6]]