Chci rozjet IPv6 na routeru (Linux Debian 12, FRR, včetně DHCPv6)

<h2>Zapnout IPv6 a forwarding</h2><p>Poeditovat sysctl.conf</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="7e5ed5ca-c155-40ec-a0b8-1903da3191de" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# nano /etc/sysctl.conf</pre></td></tr></table><p>Najít <code>net.ipv6.conf.all.forwarding</code>  a nastavit <code>1</code>. (projeví se po rebootu)</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="8984e3c1-0fd7-4db6-bc90-fda0c500279e" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre># Uncomment the next line to enable packet forwarding for IPv6
#  Enabling this option disables Stateless Address Autoconfiguration
#  based on Router Advertisements for this host
net.ipv6.conf.all.forwarding=1</pre></td></tr></table><p>Spustit sysctl (projeví se hned)</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="c0d711bc-80d3-4b2e-9fbb-97476938cf3b" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# sysctl net.ipv6.conf.all.forwarding=1</pre></td></tr></table><p>Kontrola (musí tam bejt 1)</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="216d258d-19cf-4068-a77d-429eb6ee53f6" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# sysctl net.ipv6.conf.all.forwarding
net.ipv6.conf.all.forwarding = 1</pre></td></tr></table><p><br /></p><h2>Nastavit vlastní adresu pro router</h2><p>Poeditovat /etc/network/interfaces</p><table class="wrapped confluenceTable"><colgroup><col /><col /></colgroup><tbody><tr><th scope="col" class="confluenceTh">před (pouze IPv4)</th><th scope="col" class="confluenceTh">po (oboje IPv4 a IPv6)</th></tr><tr><td class="confluenceTd"><div class="content-wrapper"><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="6dd62aae-c44a-4c1f-9879-9fdd722d7396" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# Spoj -> PMV, uplink
auto enp0s8
iface enp0s8 inet static
 address 10.107.99.130/30
  
# AP Oblast-DB2, router 1, tady jsou pripojenci
auto enp0s9
iface enp0s9 inet static
 address 10.107.185.1/26</pre></td></tr></table><br /><p><br /></p></div></td><td class="confluenceTd"><div class="content-wrapper"><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="8e4a5df7-968e-4138-a8e2-f62371931d16" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# Spoj -> PMV, uplink
auto enp0s8
iface enp0s8 inet static
 address 10.107.99.130/30
  
# AP Oblast-DB2, router 1, tady jsou pripojenci
auto enp0s9
iface enp0s9 inet static
 address 10.107.185.1/26
iface enp0s9 inet6 static
 address 2a01:16d:b210::/64</pre></td></tr></table><br /><p><br /></p></div></td></tr></tbody></table><ul><li>Na interface routeru doporučuji vždy nasazovat IPv6 adresu s prefixem <strong>/64</strong> (pokud tam chcete adresovat více zařízení) nebo <strong>/128</strong> (pokud vám stačí jen jedna adresa pro management). Vyvarujte se adresovat velké prefixy <strong>/40</strong>,<strong> /44</strong> a<strong> /48</strong> pokud vyloženě nevíte co děláte - přináší to problémy a nestandardní chování. Například nefunguje redistribute static apod.</li></ul><p>Shodit a nahodit interface (bacha na ostrý síti!)</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="4eae5a3f-af9e-495c-bb35-b25721d2460c" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# ifdown enp0s9; ifup enp0s9</pre></td></tr></table><p>Kontrola</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="dd62f2cc-126b-4732-8ce3-b674f8b0e944" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# ip address show</pre></td></tr></table><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="a928407a-9a8b-47d4-8e9e-be07aa3fbcf0" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# ping6 2a01:16d:b210::</pre></td></tr></table><h2>Routování - co budeme šířit ven?</h2><p>Zadat 1x agregovanou routu pro tento router. Velikost bude mezi /40 - /48, <a class="external-link" href="https://wiki.hkfree.org/IPv6#pods.C3.AD.C5.A5_v_oblasti_.2F48.2C_tzn._pp_.3D_00_-_ff_.28256_s.C3.ADt.C3.AD_v_oblasti.29." rel="nofollow">záleží na správci</a>. Doporučuju /44.</p><p>/etc/frr/daemons.conf</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="3348bfad-33e4-4c9a-85f0-1096e51e328e" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>...
ospf6d=yes
...</pre></td></tr></table><p><br /></p><p>/etc/frr/frr.conf</p><table class="wrapped confluenceTable"><colgroup class=""><col class="" /><col class="" /></colgroup><tbody class=""><tr class=""><th class="confluenceTh">před (pouze IPv4)</th><th class="confluenceTh">po (oboje IPv4 a IPv6)</th></tr><tr class=""><td class="confluenceTd"><div class="content-wrapper"><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="4e374fef-497d-46f7-8c65-db502193fdd1" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>!
! Vzorovy router, oblast DB2, router 1
!
hostname DB2-router1-debian12
log syslog informational
frr defaults traditional

password free
enable password q7823yfbksldmf872fwfigu3ef97

! Verejky IPv4
ip route 89.200.202.0/28 eth0

interface enp0s8
 description Spoj -> PMV, uplink
 ip ospf cost 10
 ip ospf hello-interval 2
 ip ospf dead-interval 6

router ospf
 ospf router-id 10.107.185.1
 redistribute static 
</pre></td></tr></table><p><br /></p></div></td><td class="confluenceTd"><div class="content-wrapper"><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="0b47e44f-6cca-4224-ad00-5ec10ecc9fca" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>!
! Vzorovy router, oblast DB2, router 1
!
hostname DB2-router1-debian12
log syslog informational
frr defaults traditional

password free
enable password q7823yfbksldmf872fwfigu3ef97

! Verejky IPv4
ip route 89.200.202.0/28 eth0

! IPv6: Agregovana routa pro cely tento router (jde ven pres OSPF)
ipv6 route 2a01:16d:b210::/44 blackhole

interface enp0s8
 description Spoj -> PMV, uplink
 ip ospf cost 10
 ip ospf hello-interval 2
 ip ospf dead-interval 6
 ipv6 ospf6 area 0.0.0.0
 ipv6 ospf6 cost 10
 ipv6 ospf6 hello-interval 2
 ipv6 ospf6 dead-interval 6
 ipv6 ospf6 network point-to-point

router ospf
 ospf router-id 10.107.185.1
 redistribute static
 network 10.107.99.134/30 area 0.0.0.0

router ospf6
 ospf6 router-id 10.107.185.1
 redistribute static metric-type 1 route-map JEN-VELKY-SUBNETY

route-map JEN-VELKY-SUBNETY permit 10
  match ipv6 address prefix-list velikost-40-az-48

ipv6 prefix-list velikost-40-az-48 seq 5 permit 2a01:168::/29 ge 40 le 48
</pre></td></tr></table><p><br /></p></div></td></tr></tbody></table><p><br /></p><p>Kontrola na chybu v konfiguraci</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="8c88579b-ef25-4ea6-b920-9bb04a59a44a" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# vtysh -C
root@DB2-router1-debian12:~# </pre></td></tr></table><p>žádnej výstup  → je to OK</p><p><br /></p><p>Restart FRR</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="7c363dd0-c617-4217-a00d-be038706e8f6" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# systemctl restart frr</pre></td></tr></table><p><br /></p><p><br /></p><p><br /></p><h2>Adresy pro připojence</h2><h3>Rozvaha</h3><p>Ze subnetu <span style="color: rgb(0,128,0);">2a01:16d:b21</span>0::/44 (oblast DB2, router 1) si ukrojíme <span style="color: rgb(0,128,0);">2a01:16d:b120</span>::/48 (oblast DB2, router 1, interface enp0s9).</p><p>Tento menší subnet rozdělíme na </p><ol><li><span style="color: rgb(0,128,0);">2a01:16d:b210:00</span>00::/56 - nepoužijeme</li><li><span style="color: rgb(255,0,0);">2a01:16d:b210:01</span>00::/56 - pro připojence UID2350</li><li><span style="color: rgb(255,0,0);">2a01:16d:b210:02</span>00::/56 - pro připojence UID2351</li><li><span style="color: rgb(255,0,0);">2a01:16d:b210:03</span>00::/56 - pro připojence UID2352</li><li><span style="color: rgb(255,0,0);">2a01:16d:b210:04</span>00::/56 - pro připojence UID2353</li></ol><h2>DHCPv6 server</h2><p>Použijeme ne úplně mainstreamový <a href="https://github.com/HenriWahl/dhcpy6d">dhcpy6d</a>. Proč ne &quot;běžné&quot; DHCP servery? Protože chceme stejně jako v DHCPv4 indentifikovat klienty podle MAC adres. To v principu DHCPv6 neumí <img class="emoticon emoticon-warning" data-emoticon-name="warning" border="0" src="/s/-u798cy/9104/fpsc10/_/images/icons/emoticons/warning.svg" alt="(varování)" title="(varování)" data-emoji-short-name=":warning:" /> (umí pouze DUID). Tento dhcpy6d je jediný soft kde jsou MAC adresy (v rozporu s RFC) spolehlivě funkční (na Linuxu).</p><p>Běžné DHCPv6 servery:</p><p><a href="https://linux.die.net/man/5/dhcp6s.conf">dhcp6s</a> - umí pouze DUID, neumí MAC</p><p><a href="https://mirrors.deepspace6.net/Linux+IPv6-HOWTO/hints-daemons-isc-dhcp.html">ISC DHCP</a> - umí pouze DUID, navíc discontinued as of 2022</p><p><a href="https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html#mac-hardware-addresses-in-dhcpv6">ISC Kea</a> - pouze DUID, teoreticky umí MAC, prakticky špatně/nepoužitelně (mac-source metoda &quot;raw&quot; je popsaná ale není implementovaná, ostatní metody nespolehlivý)</p><p><br /></p><p>Instalace</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="a3b5b3de-1b9b-4459-a9fc-3c574876c537" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12~# apt install dhcpy6d
root@DB2-router1-debian12~# apt install radvd
root@DB2-router1-debian12~# apt install sudo</pre></td></tr></table><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="bf8cb0a8-bc9e-4124-b888-a2b1dfa2cce4" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# systemctl enable dhcpy6d</pre></td></tr></table><p><br /></p><p>Poeditovat /etc/dhcpy6d.conf</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="2a6b9b0d-92c1-4a9b-8a1b-8c4c40b924c5" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre># dhcpy6d configuration for hkfree.org
# 2023 VojtaLhota &lt;vpithart@lhota.hkfree.org>
#
# Please see the examples in /usr/share/doc/dhcpy6d and https://dhcpy6.de/documentation for more information.
#
[dhcpy6d]
# Interface to listen to multicast ff02::1:2.
interface = enp0s9
really_do_it = yes

store_config = file
store_file_config = /etc/dhcpy6d-clients.conf

# SQLite DB for leases and LLIP-MAC-mapping.
store_volatile = sqlite
store_sqlite_volatile = /var/lib/dhcpy6d/volatile.sqlite
log = on
log_file = /var/log/dhcpy6d.log

manage_routes_at_start = yes

#
# Adresy a prefixy pro pripojence podle dhcpy6d-clients.conf
#
[class_valid_client]
advertise = addresses prefixes
addresses = hkfree_global_members
prefixes = hkfree_global_members
nameserver = 2a01:168:0:10::f:2 2a01:168:0:10::a
call_up = sudo ip -6 route add $prefix$/$length$ via $router$ dev enp0s9
call_down = sudo ip -6 route delete $prefix$/$length$ via $router$ dev enp0s9

[address_hkfree_global_members]
category = id
pattern = 2a01:16d:b210::$id$
preferred_lifetime = 86400
valid_lifetime = 86400

[prefix_hkfree_global_members]
category = id
pattern = 2a01:16d:b210:$id$::
length = 56
preferred_lifetime = 86400
valid_lifetime = 86400

#
# Nezname MAC adresy: dostanou adresu+prefix z rozsahu "f" na 3 minuty (max 5 minut)
#
[class_default]
advertise = addresses prefixes
addresses = hkfree_global_neznamy
prefixes = hkfree_global_neznamy
t1 = 180
t2 = 180
# tady zamerne neni call_up a call_down - neznama MAC adresa nebude mit routovani
# -> musi se spravne zadat do dhcpy6d-clients.conf, pak bude fungovat

[address_hkfree_global_neznamy]
category = range
range = fa00-ff00
pattern = 2a01:16d:b21f::$range$
preferred_lifetime = 180
valid_lifetime = 300

[prefix_hkfree_global_neznamy]
category = range
range = fa00-ff00
pattern = 2a01:16d:b21f:$range$::
length = 56
preferred_lifetime = 180
valid_lifetime = 300</pre></td></tr></table><p><br /></p><p>Vytvořit /etc/dhcpy6d-clients.conf</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="fbc44b56-90a9-4003-93a3-909d8b1e5de3" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre># dhcpy6d configuration for hkfree.org
# 2023 VojtaLhota &lt;vpithart@lhota.hkfree.org>
#
# 1 pripojenec = 1 zaznam
#
#  [uid2350]                   2350 - ID clena podle userdb
#  hostname = uid2350
#  mac = 08:00:27:1b:36:f9     MAC adresa klientskeho zarizeni clena
#  id = 0700                   0700 - cast adresy (bity 49-56), tj. v rozsahu 0100 - ff00
#  class = valid_client
#
#  [uid2351]                   2351 - ID clena podle userdb
#  hostname = uid2351
#  mac = 08:03:f3:22:33:54     MAC adresa klientskeho zarizeni clena
#  id = 7a00                   7a00 - cast adresy (bity 49-56), tj. v rozsahu 0100 - ff00
#  class = valid_client

[uid2350]
mac = 08:00:27:1b:36:f9
hostname = uid2350
id = 0100
class = valid_client

[uid2351]
mac = 08:00:37:dc:c6:23
hostname = uid2351
id = 0200
class = valid_client

</pre></td></tr></table><p><br /></p><p>Vytvořit /etc/sudoers.d/dhcpy6d-can-alter-ipv6-routes</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="04c480d5-e6c6-44c2-9cdd-b311012509cc" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre># User dhcpy6d can add/remove ipv6 routes
dhcpy6d ALL=NOPASSWD: /usr/sbin/ip -6 route *</pre></td></tr></table><p><br /></p><p>Vytvořit /etc/radvd.conf</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="da0a64e9-8fa7-4e05-a326-530402347da1" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>interface enp0s9 {
  AdvSendAdvert on;
  AdvManagedFlag on;
	MinRtrAdvInterval 30;
	MaxRtrAdvInterval 300;
 	prefix 2a01:16d:b210::/64
	{
		AdvOnLink on;
		AdvAutonomous on;
		AdvRouterAddr off;
	};
};

</pre></td></tr></table><p><br /></p><p>(re)start DHCP serveru</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="8da67b19-a766-4b2c-a547-d38f33a215db" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# systemctl restart dhcpy6d</pre></td></tr></table><p><br /></p><p>Logy s DHCP serveru:</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="58f29b80-b874-4565-bc76-f1ab0e354a36" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>root@DB2-router1-debian12:~# tail -f /var/log/dhcpy6d.log</pre></td></tr></table><p><br /></p><p>Logy: Znamy klient (MAC 08:00:27:1b:36:f9) vyzaduje prefix</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="87dec5b3-f4e4-45d3-a59c-f52da9612e35" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>2023-12-17 16:04:17,425 dhcpy6d INFO SOLICIT | transaction: 4d469f | answer: normal | client_llip: fe80:0000:0000:0000:0a00:27ff:fe1b:36f9 | counter: 1 | duid: 000300010800270aef86 | ia_options: [25] | iaid: 00000002 | interface: enp0s9 | last_message_received_type: 1 | mac: 08:00:27:1b:36:f9 | options_request: [23] | rapid_commit: True
2023-12-17 16:04:17,426 dhcpy6d INFO REPLY | transaction: 4d469f | options: [7, 14, 23, 25]  | addresses: 2a01:016d:b210:0000:0000:0000:0000:0100 | client_class: valid_client | hostname: uid2350 | prefixes: 2a01:016d:b210:0100:0000:0000:0000:0000/56
2023-12-17 16:04:17,555 dhcpy6d INFO Called 'sudo ip -6 route add 2a01:016d:b210:0100:0000:0000:0000:0000/56 via 2a01:016d:b210:0000:0000:0000:0000:0100 dev enp0s9' to modify route - result: 0</pre></td></tr></table><p><br /></p><p>Logy: znamy klient (MAC 08:00:27:1b:36:f9) vyzaduje prefix + adresu</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="14875946-7dc8-4f0d-80ab-2c53a8e10122" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>2023-12-17 16:05:26,917 dhcpy6d INFO SOLICIT | transaction: 56026a | answer: normal | client_llip: fe80:0000:0000:0000:0a00:27ff:fe1b:36f9 | counter: 1 | duid: 000300010800270aef86 | ia_options: [3, 25] | iaid: 00000002 | interface: enp0s9 | last_message_received_type: 1 | mac: 08:00:27:1b:36:f9 | options_request: [23] | rapid_commit: True
2023-12-17 16:05:26,921 dhcpy6d INFO REPLY | transaction: 56026a | options: [3, 7, 14, 23, 25]  | addresses: 2a01:016d:b210:0000:0000:0000:0000:0100 | client_class: valid_client | hostname: uid2350 | prefixes: 2a01:016d:b210:0100:0000:0000:0000:0000/56
2023-12-17 16:05:27,092 dhcpy6d INFO Called 'sudo ip -6 route add 2a01:016d:b210:0100:0000:0000:0000:0000/56 via 2a01:016d:b210:0000:0000:0000:0000:0100 dev enp0s9' to modify route - result: 0</pre></td></tr></table><p><br /></p><p>Logy: neznamy klient vyzaduje prefix + adresu → dostane &quot;fa00&quot; z odpadniho &quot;f&quot; rozsahu</p><table class="wysiwyg-macro" data-macro-name="code" data-macro-id="07b13c55-243b-44dc-9019-2347fd29129a" aria-label="code macro" data-macro-schema-version="1" style="background-image: url(https://confluence.hkfree.org/plugins/servlet/confluence/placeholder/macro-heading?definition=e2NvZGV9&amp;locale=cs_CZ&amp;version=2); background-repeat: no-repeat;" data-macro-body-type="PLAIN_TEXT"><tr><td class="wysiwyg-macro-body"><pre>2023-12-17 16:06:33,509 dhcpy6d INFO SOLICIT | transaction: 570ee2 | answer: normal | client_llip: fe80:0000:0000:0000:0a00:27ff:fe1b:36f0 | counter: 1 | duid: 000300010800270aefd8 | ia_options: [3, 25] | iaid: 00000002 | interface: enp0s9 | last_message_received_type: 1 | mac: 08:00:27:1b:36:f0 | options_request: [23] | rapid_commit: True
2023-12-17 16:06:33,510 dhcpy6d INFO REPLY | transaction: 570ee2 | options: [3, 7, 14, 25]  | addresses: 2a01:016d:b21f:0000:0000:0000:0000:fa00 | client_class: default_enp0s9 | prefixes: 2a01:016d:b21f:fa00:0000:0000:0000:0000/56</pre></td></tr></table><p><br /></p><p><br /></p><p><br /></p>