Page MenuHomeDevCentral

Configure IPv6 with DUID for Online network
ClosedPublic

Authored by dereckson on Jun 7 2023, 00:41.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Nov 16, 05:02
Unknown Object (File)
Tue, Nov 12, 20:51
Unknown Object (File)
Tue, Nov 12, 06:29
Unknown Object (File)
Tue, Nov 12, 05:42
Unknown Object (File)
Tue, Nov 12, 03:44
Unknown Object (File)
Tue, Nov 12, 02:24
Unknown Object (File)
Mon, Nov 11, 18:22
Unknown Object (File)
Sun, Nov 10, 23:47
Subscribers
None

Details

Summary

Online requests DHCP connection with a specific DUID.

It's treated as a secret to restrict range use to a specific account.
As such, it's stored in Vault, hence a policy change and specialized
credentials methods.

Ref T1861.

Test Plan

Tested on Windriver

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson created this revision.
This revision is now accepted and ready to land.Jun 7 2023, 00:42
pillar/nodes/nodes.sls
277–281

What I'd ideally like to see is this:

ipv6:
  addresses:
    # SLAAC
    - address: 2001:0bc8:6005:0005:aa1e:84ff:fef3:5d9c
      prefixlen: 128

    # /56 routed block
    - address: 2001:bc8:2e84:700::da7a:7001
      prefixlen: 56
      aliases:
        - 2001:bc8:2e84:700::...
dereckson added inline comments.
pillar/nodes/nodes.sls
277–281

At Online, you need to disable SLAAC to get the /56 routed block working.

roles/core/network/ipv6.sls
102

Ok, we've a configuration.

But we also need a service to start:

/usr/local/sbin/dhclient -cf /usr/local/etc/dhclient6.conf -6 -P -v igb0

dereckson marked an inline comment as not done.Jun 7 2023, 01:07
This revision is now accepted and ready to land.Jun 7 2023, 02:08