2 ms·
> Out of this, a customer router should advertise a /64 on each interface, for devices on networks that only want a single address, and hand out /56s or /60s vi
by yrro 2y ago
> Out of this, a customer router should advertise a /64 on each interface, for devices on networks that only want a single address, and hand out /56s or /60s via DHCPv6 IA_PD for devices that want more[...].
That said, support for this in the type of router you see on small networks is non-existent. My Ubiquiti EdgeMAX EdgeRouter, for instance, is perfectly capable of requesting a prefix, and assigning a /64 out of the assigned prefix to each other interface for clients to use. But there's no support for, for instance, splitting the prefix up into subprefixes and handing _them_ out via DHCP6 IA_PD; the generated dhcp6c configuration file has a hardcoded sla-len value of 8.
And even if there was, and devices on my network were able to get their own /56s, east/west traffic would have to go via the router instead of being switched directly to the device hosting the virtual network; or the device would have to transmit its own RAs for the delegated prefix, which is a bad idea for security... a lot of assumptions about how we build networks need to be re-visited.
(Sadly Ubiquiti's Unifi line has even worse support for IPv6... and I can't in fairness find documentation suggesting that Mikrotik is any better in this regard... any other suggestions please make them!)
- yrro 2y agoCorrection, Mikrotik might support this after all if I understand https://wu.renjie.im/blog/network/ros-dhcpv6/#enable-dhcpv6-server https://wu.renjie.im/blog/network/ros-dhcpv6/#enable-dhcpv6-... correctly!