macos Sierra with CGA address?

Matthew Ford ford at isoc.org
Wed Dec 14 12:23:50 CET 2016


> On 14 Dec 2016, at 10:55, Holger Zuleger <Holger.Zuleger at hznet.de> wrote:
> 
> Hi,
> 
> I just realized that the permanent interface identifier of my MAC has
> changed after upgrading to OS 10.12 (I guess).
> 
> The output of ifconfig shows a new "secured" flag at the permanent address.
> $ ifconfig en0 | grep inet6 | \
>>      sed "s/2[^:]*:[^:]*:[^:]*:[^:]*:/<prfx48>:/"
> inet6 fe80::c54:6333:ac12:c67b%en0 prefixlen 64 secured scopeid 0x4
> inet6 <prfx48>:20e3:84f6:6794:5ace prefixlen 64 autoconf secured
> inet6 <prfx48>:8822:a8a3:b6ec:a79b prefixlen 64 autoconf temporary
> 
> I found two or three posts in the internet, all mentioning (or hoping)
> that this is related to a change to RFC7217 as default IID mechanism.
> 
> But one guy sad, that the source code (of 10.11) shows, that this is a
> cryptographic generated interface identifier for SeND (RFC3971).
> 
> I tend to believe that the latter is true.
> Has anyone more information about this? Especially how to configure it?
> 

man ifconfig says:

" insecure
             Disable the processing of Secure Neighbor Discovery (SEND).

  -insecure
             Do not disabled the processing of Secure Neighbor Discovery
             (SEND).”

Mat


More information about the ipv6-ops mailing list