[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [OT] IPv6 addresses collisions



Wouter Verhelst wrote:
> On Tue, Jan 30, 2007 at 08:37:06PM -0200, Christian Lyra wrote:
>>> My question is if it's possible to configure machines with stateless
>>> autoconfiguration and servers with manual configuration (for example,
>>> prefix::1 or prefix::24). Sould i mix this mechanism? Could i have 
>>> collisions
>>> of adresses between stateless autoconfiguration and manual configuration of
>>> IPv6 addresses?
>> yes, you can do it with some "safety"... Stateless configuration is
>> based on the MAC address of network card plus the Router/prefix
>> announce made by the router. As long you dont have a strange MAC like
>> 00:00:00:00:00:01 you should be fine. Take a look of how the MAC is
> 
> Even if that would be the case (which is highly unlikely), you should
> still be fine. While stateless configuration is indeed based on the MAC
> address, it doesn't take the MAC address as is which it would then put
> in your IP address; rather, it does some transformation. Which
> transformation that exactly is depends on whether or not you use the
> privacy extensions, though. If you don't, I believe it simply adds some
> "ff:fe" somewhere in the middle of the IP address.

+ setting the globally unique bit, which usually is the 0x2 in the
begin. But ehmm check the RFC for the exact details :)

Next to that there Duplicate Address Detection (DAD) is performed, if a
dupe is detected it will fall over to the non-global unique number by
dropping the globally-unique-bit again.

DAD is nasty btw when somebody dupes your address, yours drops of the
net. Just like ARP spoofing in IPv4. See also the THC IPv6 tools.

Btw privacy addresses (RFC3071) are randomly generated and don't have
any relation to the MAC (or for that matter the EUI-64) portion of the
LL-address.

Greets,
 Jeroen



Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: