disabling client use of SLAAC
Eric Vyncke (evyncke)
evyncke at cisco.com
Sun Mar 7 09:09:21 CET 2010
Indeed, the 'ipv6 nd suppress-ra' is only suppressing the periodic RA,
it will not prevent the router to reply to RS.
As written before 'ipv6 nd prefix default no-autoconfig' is probably
what you want to do to disable SLAAC. It works for me for Mac & Windows
> -----Original Message-----
> From: ipv6-ops-bounces+evyncke=cisco.com at lists.cluenet.de
> bounces+evyncke=cisco.com at lists.cluenet.de] On Behalf Of John Payne
> Sent: dimanche 7 mars 2010 4:34
> To: Bernhard Schmidt
> Cc: ipv6-ops at lists.cluenet.de
> Subject: Re: disabling client use of SLAAC
> On Mar 6, 2010, at 6:42 PM, Bernhard Schmidt <berni at birkenwald.de>
> > On 06.03.2010 22:41, Mark Smith wrote:
> > Bernhard
> >>> Autoconf doesn't work for on>64 bit prefixes, so extending it to
> >>> an 80
> >>> is a [interesting] way of disabling it completely.
> >> So is announcing RA Prefix Information options without the
> >> autonomous address-configuration flag set. I'd doubt anybody
> >> would be willing to standardise hack like that when there is
> >> already a
> >> proper way to stop nodes autoconfiguring addresses.
> > Except it doesn't work everywhere, for example it's not available in
> > the most recent NX-OS 4.2 (Cisco Nexus 7000). You can either do
> > "ipv6 nd suppress-ra" on that platform (which had (has?) the nasty
> > problem of one RA being sent during software upgrade, hello SLAAC on
> > >500 cluster hosts), or use a prefixlen != /64.
> That also doesn't stop 6500s from responding to RS queries which is
> enough for some Linux boxes to auto configure, it seems....
More information about the ipv6-ops