kea dhpcv6 issue with vlans

I have an issue in having dhcp6 correctly setup with different vlan using link-local address. The first vlan10 works but not the seconf vlan20 even if each devices receive correctly their prefixes. pf.conf pass all ipv6 traffic without any filtering.

When I set the vlan20 address statically to "2001:db8:a:de02::1/64" then the routing works and devices on vlan20 can connect to internet. What do I miss ?

Vlans are setup like this:

Code:
vlan10: flags=1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500
    options=4600703<RXCSUM,TXCSUM,TSO4,TSO6,LRO,RXCSUM_IPV6,TXCSUM_IPV6,MEXTPG>
    ether fe:40:d2:8a:59:63
    inet 10.0.1.1 netmask 0xffffff00 broadcast 10.0.1.255
    inet6 fe80::fc40:d2ff:fe8a:5963%vlan10 prefixlen 64 scopeid 0x9
    groups: vlan
    vlan: 10 vlanproto: 802.1q vlanpcp: 0 parent interface: iavf1
    media: Ethernet autoselect (10Gbase-SR <full-duplex>)
    status: active
    nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
vlan20: flags=1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP> metric 0 mtu 1500
    options=4600703<RXCSUM,TXCSUM,TSO4,TSO6,LRO,RXCSUM_IPV6,TXCSUM_IPV6,MEXTPG>
    ether fe:40:d2:8a:59:63
    inet 10.0.2.1 netmask 0xffffff00 broadcast 10.0.2.255
    inet6 fe80::fc40:d2ff:fe8a:5963%vlan20 prefixlen 64 scopeid 0xb
    groups: vlan
    vlan: 20 vlanproto: 802.1q vlanpcp: 0 parent interface: iavf1
    media: Ethernet autoselect (10Gbase-SR <full-duplex>)
    status: active
    nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

and kea-dhcp6.conf:

Code:
{
"Dhcp6": {
    "interfaces-config": {
        "interfaces": [ "vlan10", "vlan20" ]
    },

...
"subnet6": [
        {
            "id": 1,
            "interface": "vlan10",
            "subnet": "2001:db8:a:fe01::/64",
            "pools": [ { "pool": "2001:db8:a:fe01::1 - 2001:db8:a:fe01::ffff" } ]
        },
        {
            "id": 2,
            "interface": "vlan20",
            "subnet": "2001:db8:a:fe02::/64",
            "pools": [ { "pool": "2001:db8:a:fe02::1 - 2001:db8:a:fe02::ffff" } ]
        }
    ],

..

and rtadv.conf

Code:
vlan10:\
  :addr="2001:db8:a:fe01::":prefixlen#64:
vlan20:\
  :addr="2001:db8:a:fe02::":prefixlen#64:
 
Code:
        {
            "id": 2,
            "interface": "vlan20",
            "subnet": "2a12:5541:a:fe02::/64",
            "pools": [ { "pool": "2001:db8:a:fe02::1 - 2001:db8:a:fe02::ffff" } ]
        }
Shouldn't that be "subnet": "2001:db8:a:fe02::/64"?
 
yes edited, but anyway th eissue persist. It's like it can't route on different local links...
 
rtadvd.conf(5):
Code:
     raflags
             (str or num) A 8-bit flags field in router advertisement message
             header.  This field can be specified either as a case-sensitive
             string or as an integer.  A string consists of characters each of
             which corresponds to a particular flag bit(s).  An integer should
             be the logical OR of all enabled bits.  Bit 7 ('m' or 0x80) means
             Managed address configuration flag bit, and Bit 6 ('o' or 0x40)
             means Other stateful configuration flag bit.  Bit 4 (0x10) and
             Bit 3 (0x08) are used to encode router preference.  Bits 01 (or
             'h') means high, 00 means medium, and 11 (or 'l') means low.
             Bits 10 is reserved, and must not be specified.  There is no
             character to specify the medium preference explicitly.  The
             default value of the entire flag is 0 (or a null string,) which
             means no additional configuration methods, and the medium router
             preference.
These flags determine if a client queries a DHCPv6 server or not. The default is that rtadvd(8) provides SLAAC addresses for clients. I used to have a working DHCPv6 with the ISC DHCP server, after migrating to Kea I haven't been able to get DHCPv6 working anymore. SLAAC works fine though.
 
ah that's annoying my end goal is to use it to balance between 2 machines the announcement for fail over
 
Play around with the flags, I got some functionality but it was SLAAC or DHCPv6, never got both to work. I need SLAAC for the devices that don't/can't do DHCPv6. If I recall correctly the ISC DHCP server would provide both SLAAC and DHCPv6, but Kea seems to do DHCPv6 only, and I haven't been able to get it to play nice with rtadvd(8).
 
Back
Top