disabling client use of SLAAC

Eric Vyncke (evyncke) evyncke at cisco.com
Sun Mar 7 09:09:21 CET 2010


Indeed, the 'ipv6 nd suppress-ra' is only suppressing the periodic RA,
it will not prevent the router to reply to RS.

As written before 'ipv6 nd prefix default no-autoconfig' is probably
what you want to do to disable SLAAC. It works for me for Mac & Windows
XP/Vista

> -----Original Message-----
> From: ipv6-ops-bounces+evyncke=cisco.com at lists.cluenet.de
[mailto:ipv6-ops-
> bounces+evyncke=cisco.com at lists.cluenet.de] On Behalf Of John Payne
> Sent: dimanche 7 mars 2010 4:34
> To: Bernhard Schmidt
> Cc: ipv6-ops at lists.cluenet.de
> Subject: Re: disabling client use of SLAAC
> 
> 
> 
> On Mar 6, 2010, at 6:42 PM, Bernhard Schmidt <berni at birkenwald.de>
> wrote:
> 
> > On 06.03.2010 22:41, Mark Smith wrote:
> >
> > Bernhard
> >
> >>> Autoconf doesn't work for on>64 bit prefixes, so extending it to
> >>> an 80
> >>> is a [interesting] way of disabling it completely.
> >> So is announcing RA Prefix Information options without the
> >> autonomous address-configuration flag set. I'd doubt anybody
> >> would be willing to standardise hack like that when there is
> >> already a
> >> proper way to stop nodes autoconfiguring addresses.
> >
> > Except it doesn't work everywhere, for example it's not available in
> > the most recent NX-OS 4.2 (Cisco Nexus 7000). You can either do
> > "ipv6 nd suppress-ra" on that platform (which had (has?) the nasty
> > problem of one RA being sent during software upgrade, hello SLAAC on
> > >500 cluster hosts), or use a prefixlen != /64.
> 
> That also doesn't stop 6500s from responding to RS queries which is
> enough for some Linux boxes to auto configure, it seems....



More information about the ipv6-ops mailing list