SOLVED ipv6_cpe_wanif not quite working in iocage jail

[Patrick M. Hausen]

Hi all,

the mentioned setting should theoretically permit a system that is configured as an IPv6 router (like my OpenVPN gateway) to still receive its IPv6 default router via RA on the external interface. So on a regular host this configuration does what it should do:

Code:

ifconfig_igb0_ipv6="inet6 accept_rtadv auto_linklocal"
ipv6_gateway_enable="YES"
ipv6_cpe_wanif="igb0"

Yet, for some reason in a jail, it doesn't. Simply replace igb0 with epair0b and you have my jail settings.
These should set the flag -no_radr on the mentioned interface with ifconfig and set these two sysctls to 1:

Code:

net.inet6.ip6.no_radr: 0
net.inet6.ip6.rfc6204w3: 0

When I configure all of this manually, like this:

Code:

# rc.conf
ifconfig_epair0b_ipv6="inet6 accept_rtadv -no_radr auto_linklocal"
# no ipv6_gateway_enable ...

# sysctl.conf
net.inet6.ip6.no_radr=1
net.inet6.ip6.rfc6204w3=1
net.inet6.ip6.forwarding=1

then everything works as it should.

Any hints welcome.

Thanks!
Patrick

 

[Patrick M. Hausen]

FreeBSD bug:

243193 – ipv6_cpe_wanif not honored by /etc/rc.d/netoptions when run in VNET jail

bugs.freebsd.org

Kind regards,
Patrick