DHCP-PD on wan side with Stateful DHCPv6 assigned globally routable ips on lan side. Need to dynamically...
What is the idiomatic way of saying “he is ticklish under armpits”?
In a topological space if there exists a loop that cannot be contracted to a point does there exist a simple loop that cannot be contracted also?
How can I iterate this process?
Are there any financial disadvantages to living significantly "below your means"?
Drawing complex inscribed and circumscribed polygons in TikZ
What are good ways to improve as a writer other than writing courses?
In reversi, can you overwrite two chips in one move?
How to mark beverage cans in a cooler for a blind person?
Could one become a successful researcher by writing some really good papers while being outside academia?
How do I explain to a team that the project they will work on for six months will certainly be cancelled?
How quickly could a country build a tall concrete wall around a city?
What word can be used to describe a bug in a movie?
Dereferencing a pointer in a 'for' loop initializer creates a segmentation fault
If a Contingency spell has been cast on a creature, does the Simulacrum spell transfer the contingent spell to its duplicate?
Who are these characters/superheroes in the posters from Chris's room in Family Guy?
Blocking people from taking pictures of me with smartphone
Unique combinations of a list of tuples
What is the maximum number of PC-controlled undead?
Why is there a need to prevent a racist, sexist, or otherwise bigoted vendor from discriminating who they sell to?
Is TA-ing worth the opportunity cost?
How do I calculate the difference in lens reach between a superzoom compact and a DSLR zoom lens?
'sudo apt-get update' get a warning
What does "sardine box" mean?
changing number of arguments to a function in secondary evaluation
DHCP-PD on wan side with Stateful DHCPv6 assigned globally routable ips on lan side. Need to dynamically configure DHCPv6 on lan side
ip6tables allow IPv6 traffic from OpenVPN through my VPSOpenVPN IPv6 route traffic through serverHost part of DHCPv6-assigned router addressHow do I configure my DNS / DHCP / gateway server with 2 NICs to use its own DNS?How to get Pi-Hole to work with IPv6?IPv6 address range for LAN static IP assignment
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}
Context
I'm currently neck deep in building an internet gateway out of an old fanless, headless Intel Atom/ITX computer I had laying around. These are my requirements:
- have an ipv4 and ipv6 ip provided by my ISP's DCHP assigned to the internet-facing interface
- recieve an ipv6 prefix provided by my ISP's DHCP.
- have a static, private IPv4 ip facing the lan.
- have IPv4 DHCP server on lan-facing interface.
- have a IPv6 ip set as
<prefix>::1/64on the lan-facing interface - have a DHCPv6 server providing stateful assignment of addresses within the prefix provided by my ISP to LAN clients.
- must be resilient to disconnects and reconnects on both lan and wan facing interfaces.
- must function as a network appliance: no maintenance beyond security updates.
I want to use Stateful DHCPv6 instead of Stateless DHCP or SLAAC because I will be setting up DDNS managed by my new gateway as well as radius and a few other odds an ends... some of which will be used to determine what ip clients end up with.
I currently have everything working on the ipv4 side. Like clockwork. The gateway itself has a fully functioning dual-stack connection to the internet and can access resources both via ipv4 and ipv6. I've also implemented a netfilter based firewall for both ipv4 and ipv6. I've even got the lan side assigned a static-private ipv4 address and a <prefix>::1/64 address. And I can provide clients on my lan with an ipv4 address, dns, domain, gateway and all the rest via DHCP. Resilience to disconnects and reconnects is provided by ifplugd.
The Problem
What I can't do is provide Stateful IPv6 addresses in the range of <prefix>::0/64 to clients via DHCP. I'm stuck with the reality that dhcpd needs me to set a static name server, static gateway, and static prefix in it's config file... yet all of those are dynamically assigned based on the prefix given by my ISP. I've been through the dhcpd.conf manpage a number of times now and I don't see anything offering a way to assign these dynamically. That dhcpcd stores it's lease data in binary format doesn't help matters. I've found a workable way to query dhcpcd for it's lease data, so that's not a problem anymore.
My next step is to write I've writen some scripts/systemd units to manage querying the data I need from dhcpcd and (re)starting dhcpd with the appropriate flags (will add as an answer soon). But this is clunky and I fear all the ways it could quirk out on what is meant to be a plug-and-go unit. If I have to ssh into my gateway later to fix something... it means I've failed.
My Questions:
Am I just missing the obvious here? If so, what am I missing?If I am after another 48 hours of digging through man pages and RFC documents... then it's just going to go right on being missed.- Can WIDE or another all-in-one DCHP client/server provide for my lofty goals (radius, server managed DDNS, etc)?
Can I use a link-local or private ip for the gateway ip in a different subnet? Like... canYes... but it doesn't fully solve my problem.fd41:2a0d:e8e4:0::1be the entry sent as the router option for a subnet of26AA:A4A4:300:22AF::/64if all clients have ips for both that and thefd41:2a0d:e8e4:0::/64subnet? I've read that using the link-local ip of the server is prefered over the globally routable one specifically because of my issue... but the idea of setting a gateway ip outside the subnet it's for just seems wrong.
P.S. Before anyone asks, I started off trying to use dhclient on the wan side (sticking with ISC tools for dns/dhcp), but it didn't want to resolve ipv6 and ipv4 on the same interface and wouldn't let me query an v6 ip and a v6 prefix at the same time. Probably my fault... but I gave up and switched to dhcpcd as a result.
networking ipv6 isc-dhcpd gateway
asked 2 days ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
|
show 2 more comments
Context
I'm currently neck deep in building an internet gateway out of an old fanless, headless Intel Atom/ITX computer I had laying around. These are my requirements:
- have an ipv4 and ipv6 ip provided by my ISP's DCHP assigned to the internet-facing interface
- recieve an ipv6 prefix provided by my ISP's DHCP.
- have a static, private IPv4 ip facing the lan.
- have IPv4 DHCP server on lan-facing interface.
- have a IPv6 ip set as
<prefix>::1/64on the lan-facing interface - have a DHCPv6 server providing stateful assignment of addresses within the prefix provided by my ISP to LAN clients.
- must be resilient to disconnects and reconnects on both lan and wan facing interfaces.
- must function as a network appliance: no maintenance beyond security updates.
I want to use Stateful DHCPv6 instead of Stateless DHCP or SLAAC because I will be setting up DDNS managed by my new gateway as well as radius and a few other odds an ends... some of which will be used to determine what ip clients end up with.
I currently have everything working on the ipv4 side. Like clockwork. The gateway itself has a fully functioning dual-stack connection to the internet and can access resources both via ipv4 and ipv6. I've also implemented a netfilter based firewall for both ipv4 and ipv6. I've even got the lan side assigned a static-private ipv4 address and a <prefix>::1/64 address. And I can provide clients on my lan with an ipv4 address, dns, domain, gateway and all the rest via DHCP. Resilience to disconnects and reconnects is provided by ifplugd.
The Problem
What I can't do is provide Stateful IPv6 addresses in the range of <prefix>::0/64 to clients via DHCP. I'm stuck with the reality that dhcpd needs me to set a static name server, static gateway, and static prefix in it's config file... yet all of those are dynamically assigned based on the prefix given by my ISP. I've been through the dhcpd.conf manpage a number of times now and I don't see anything offering a way to assign these dynamically. That dhcpcd stores it's lease data in binary format doesn't help matters. I've found a workable way to query dhcpcd for it's lease data, so that's not a problem anymore.
My next step is to write I've writen some scripts/systemd units to manage querying the data I need from dhcpcd and (re)starting dhcpd with the appropriate flags (will add as an answer soon). But this is clunky and I fear all the ways it could quirk out on what is meant to be a plug-and-go unit. If I have to ssh into my gateway later to fix something... it means I've failed.
My Questions:
Am I just missing the obvious here? If so, what am I missing?If I am after another 48 hours of digging through man pages and RFC documents... then it's just going to go right on being missed.- Can WIDE or another all-in-one DCHP client/server provide for my lofty goals (radius, server managed DDNS, etc)?
Can I use a link-local or private ip for the gateway ip in a different subnet? Like... canYes... but it doesn't fully solve my problem.fd41:2a0d:e8e4:0::1be the entry sent as the router option for a subnet of26AA:A4A4:300:22AF::/64if all clients have ips for both that and thefd41:2a0d:e8e4:0::/64subnet? I've read that using the link-local ip of the server is prefered over the globally routable one specifically because of my issue... but the idea of setting a gateway ip outside the subnet it's for just seems wrong.
P.S. Before anyone asks, I started off trying to use dhclient on the wan side (sticking with ISC tools for dns/dhcp), but it didn't want to resolve ipv6 and ipv4 on the same interface and wouldn't let me query an v6 ip and a v6 prefix at the same time. Probably my fault... but I gave up and switched to dhcpcd as a result.
networking ipv6 isc-dhcpd gateway
asked 2 days ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
I am not sure what the rationale behind the decision is to use DHCPv6 instead of RA, and I don't see how the DDNS fits in, but have a looked at dnsmasq used for DHCPv6?
– dirkt
2 days ago
Specifically, the RA gives up any kind of centralized management and lets every device manage it's own ip config. Which is awesome. But it's counter to my needs. And the way DDNS fits in is that I'm not going to leave the clients to request DDNS updates... instead the DHCP server will handle updating the DNS directly... which, again, "requires" centralized management of ip assignment. And that's a no on dnsmasq. Let me dig into it and get back to you.
– Cliff Armstrong
2 days ago
Perhaps I'm missing something, but dnsmasq seems to have the same issue of requiring me to staticaly configure a prefix, dns ip, etc. And, while the thought of having dhcp and dns in a single daemon is appealing... I really don't like how dnsmasq does authoritative dns. But thank you for the suggestion. I keep forgetting dnsmasq offers dhcp functionality.
– Cliff Armstrong
2 days ago
No,dnsmasqwill take the IPv6 prefix from an existing interface, and this will be your ISP provided prefix. Not sure what you mean by "DNS IP", do you want another local DNS server in addition todnsmasq?
– dirkt
yesterday
option domain-name-server <ip address of dns server (which is my gateway's lan ip)>, 2606:4700:4700::1111, 2606:4700:4700::1001How do I set that dynamically? And WINS? And all the other things dns is used to configure clients for? And I had planned to use BIND9 for authoritative dns on the local lan. I don't like how dnsmasq handles configuration of dns zones for authoritative dns. But the ability to grab the prefix from an existing interface sounds pretty handy.
– Cliff Armstrong
yesterday
|
show 2 more comments
Context
I'm currently neck deep in building an internet gateway out of an old fanless, headless Intel Atom/ITX computer I had laying around. These are my requirements:
- have an ipv4 and ipv6 ip provided by my ISP's DCHP assigned to the internet-facing interface
- recieve an ipv6 prefix provided by my ISP's DHCP.
- have a static, private IPv4 ip facing the lan.
- have IPv4 DHCP server on lan-facing interface.
- have a IPv6 ip set as
<prefix>::1/64on the lan-facing interface - have a DHCPv6 server providing stateful assignment of addresses within the prefix provided by my ISP to LAN clients.
- must be resilient to disconnects and reconnects on both lan and wan facing interfaces.
- must function as a network appliance: no maintenance beyond security updates.
I want to use Stateful DHCPv6 instead of Stateless DHCP or SLAAC because I will be setting up DDNS managed by my new gateway as well as radius and a few other odds an ends... some of which will be used to determine what ip clients end up with.
I currently have everything working on the ipv4 side. Like clockwork. The gateway itself has a fully functioning dual-stack connection to the internet and can access resources both via ipv4 and ipv6. I've also implemented a netfilter based firewall for both ipv4 and ipv6. I've even got the lan side assigned a static-private ipv4 address and a <prefix>::1/64 address. And I can provide clients on my lan with an ipv4 address, dns, domain, gateway and all the rest via DHCP. Resilience to disconnects and reconnects is provided by ifplugd.
The Problem
What I can't do is provide Stateful IPv6 addresses in the range of <prefix>::0/64 to clients via DHCP. I'm stuck with the reality that dhcpd needs me to set a static name server, static gateway, and static prefix in it's config file... yet all of those are dynamically assigned based on the prefix given by my ISP. I've been through the dhcpd.conf manpage a number of times now and I don't see anything offering a way to assign these dynamically. That dhcpcd stores it's lease data in binary format doesn't help matters. I've found a workable way to query dhcpcd for it's lease data, so that's not a problem anymore.
My next step is to write I've writen some scripts/systemd units to manage querying the data I need from dhcpcd and (re)starting dhcpd with the appropriate flags (will add as an answer soon). But this is clunky and I fear all the ways it could quirk out on what is meant to be a plug-and-go unit. If I have to ssh into my gateway later to fix something... it means I've failed.
My Questions:
Am I just missing the obvious here? If so, what am I missing?If I am after another 48 hours of digging through man pages and RFC documents... then it's just going to go right on being missed.- Can WIDE or another all-in-one DCHP client/server provide for my lofty goals (radius, server managed DDNS, etc)?
Can I use a link-local or private ip for the gateway ip in a different subnet? Like... canYes... but it doesn't fully solve my problem.fd41:2a0d:e8e4:0::1be the entry sent as the router option for a subnet of26AA:A4A4:300:22AF::/64if all clients have ips for both that and thefd41:2a0d:e8e4:0::/64subnet? I've read that using the link-local ip of the server is prefered over the globally routable one specifically because of my issue... but the idea of setting a gateway ip outside the subnet it's for just seems wrong.
P.S. Before anyone asks, I started off trying to use dhclient on the wan side (sticking with ISC tools for dns/dhcp), but it didn't want to resolve ipv6 and ipv4 on the same interface and wouldn't let me query an v6 ip and a v6 prefix at the same time. Probably my fault... but I gave up and switched to dhcpcd as a result.
networking ipv6 isc-dhcpd gateway
asked 2 days ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
Context
I'm currently neck deep in building an internet gateway out of an old fanless, headless Intel Atom/ITX computer I had laying around. These are my requirements:
- have an ipv4 and ipv6 ip provided by my ISP's DCHP assigned to the internet-facing interface
- recieve an ipv6 prefix provided by my ISP's DHCP.
- have a static, private IPv4 ip facing the lan.
- have IPv4 DHCP server on lan-facing interface.
- have a IPv6 ip set as
<prefix>::1/64on the lan-facing interface - have a DHCPv6 server providing stateful assignment of addresses within the prefix provided by my ISP to LAN clients.
- must be resilient to disconnects and reconnects on both lan and wan facing interfaces.
- must function as a network appliance: no maintenance beyond security updates.
I want to use Stateful DHCPv6 instead of Stateless DHCP or SLAAC because I will be setting up DDNS managed by my new gateway as well as radius and a few other odds an ends... some of which will be used to determine what ip clients end up with.
I currently have everything working on the ipv4 side. Like clockwork. The gateway itself has a fully functioning dual-stack connection to the internet and can access resources both via ipv4 and ipv6. I've also implemented a netfilter based firewall for both ipv4 and ipv6. I've even got the lan side assigned a static-private ipv4 address and a <prefix>::1/64 address. And I can provide clients on my lan with an ipv4 address, dns, domain, gateway and all the rest via DHCP. Resilience to disconnects and reconnects is provided by ifplugd.
The Problem
What I can't do is provide Stateful IPv6 addresses in the range of <prefix>::0/64 to clients via DHCP. I'm stuck with the reality that dhcpd needs me to set a static name server, static gateway, and static prefix in it's config file... yet all of those are dynamically assigned based on the prefix given by my ISP. I've been through the dhcpd.conf manpage a number of times now and I don't see anything offering a way to assign these dynamically. That dhcpcd stores it's lease data in binary format doesn't help matters. I've found a workable way to query dhcpcd for it's lease data, so that's not a problem anymore.
My next step is to write I've writen some scripts/systemd units to manage querying the data I need from dhcpcd and (re)starting dhcpd with the appropriate flags (will add as an answer soon). But this is clunky and I fear all the ways it could quirk out on what is meant to be a plug-and-go unit. If I have to ssh into my gateway later to fix something... it means I've failed.
My Questions:
Am I just missing the obvious here? If so, what am I missing?If I am after another 48 hours of digging through man pages and RFC documents... then it's just going to go right on being missed.- Can WIDE or another all-in-one DCHP client/server provide for my lofty goals (radius, server managed DDNS, etc)?
Can I use a link-local or private ip for the gateway ip in a different subnet? Like... canYes... but it doesn't fully solve my problem.fd41:2a0d:e8e4:0::1be the entry sent as the router option for a subnet of26AA:A4A4:300:22AF::/64if all clients have ips for both that and thefd41:2a0d:e8e4:0::/64subnet? I've read that using the link-local ip of the server is prefered over the globally routable one specifically because of my issue... but the idea of setting a gateway ip outside the subnet it's for just seems wrong.
P.S. Before anyone asks, I started off trying to use dhclient on the wan side (sticking with ISC tools for dns/dhcp), but it didn't want to resolve ipv6 and ipv4 on the same interface and wouldn't let me query an v6 ip and a v6 prefix at the same time. Probably my fault... but I gave up and switched to dhcpcd as a result.
networking ipv6 isc-dhcpd gateway
networking ipv6 isc-dhcpd gateway
asked 2 days ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
asked 2 days ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
edited 42 mins ago
Cliff Armstrong
asked 2 days ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
asked 2 days ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
asked 2 days ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
2661 gold badge3 silver badges13 bronze badges
I am not sure what the rationale behind the decision is to use DHCPv6 instead of RA, and I don't see how the DDNS fits in, but have a looked at dnsmasq used for DHCPv6?
– dirkt
2 days ago
Specifically, the RA gives up any kind of centralized management and lets every device manage it's own ip config. Which is awesome. But it's counter to my needs. And the way DDNS fits in is that I'm not going to leave the clients to request DDNS updates... instead the DHCP server will handle updating the DNS directly... which, again, "requires" centralized management of ip assignment. And that's a no on dnsmasq. Let me dig into it and get back to you.
– Cliff Armstrong
2 days ago
Perhaps I'm missing something, but dnsmasq seems to have the same issue of requiring me to staticaly configure a prefix, dns ip, etc. And, while the thought of having dhcp and dns in a single daemon is appealing... I really don't like how dnsmasq does authoritative dns. But thank you for the suggestion. I keep forgetting dnsmasq offers dhcp functionality.
– Cliff Armstrong
2 days ago
No,dnsmasqwill take the IPv6 prefix from an existing interface, and this will be your ISP provided prefix. Not sure what you mean by "DNS IP", do you want another local DNS server in addition todnsmasq?
– dirkt
yesterday
option domain-name-server <ip address of dns server (which is my gateway's lan ip)>, 2606:4700:4700::1111, 2606:4700:4700::1001How do I set that dynamically? And WINS? And all the other things dns is used to configure clients for? And I had planned to use BIND9 for authoritative dns on the local lan. I don't like how dnsmasq handles configuration of dns zones for authoritative dns. But the ability to grab the prefix from an existing interface sounds pretty handy.
– Cliff Armstrong
yesterday
|
show 2 more comments
I am not sure what the rationale behind the decision is to use DHCPv6 instead of RA, and I don't see how the DDNS fits in, but have a looked at dnsmasq used for DHCPv6?
– dirkt
2 days ago
Specifically, the RA gives up any kind of centralized management and lets every device manage it's own ip config. Which is awesome. But it's counter to my needs. And the way DDNS fits in is that I'm not going to leave the clients to request DDNS updates... instead the DHCP server will handle updating the DNS directly... which, again, "requires" centralized management of ip assignment. And that's a no on dnsmasq. Let me dig into it and get back to you.
– Cliff Armstrong
2 days ago
Perhaps I'm missing something, but dnsmasq seems to have the same issue of requiring me to staticaly configure a prefix, dns ip, etc. And, while the thought of having dhcp and dns in a single daemon is appealing... I really don't like how dnsmasq does authoritative dns. But thank you for the suggestion. I keep forgetting dnsmasq offers dhcp functionality.
– Cliff Armstrong
2 days ago
No,dnsmasqwill take the IPv6 prefix from an existing interface, and this will be your ISP provided prefix. Not sure what you mean by "DNS IP", do you want another local DNS server in addition todnsmasq?
– dirkt
yesterday
option domain-name-server <ip address of dns server (which is my gateway's lan ip)>, 2606:4700:4700::1111, 2606:4700:4700::1001How do I set that dynamically? And WINS? And all the other things dns is used to configure clients for? And I had planned to use BIND9 for authoritative dns on the local lan. I don't like how dnsmasq handles configuration of dns zones for authoritative dns. But the ability to grab the prefix from an existing interface sounds pretty handy.
– Cliff Armstrong
yesterday
I am not sure what the rationale behind the decision is to use DHCPv6 instead of RA, and I don't see how the DDNS fits in, but have a looked at dnsmasq used for DHCPv6?
– dirkt
2 days ago
I am not sure what the rationale behind the decision is to use DHCPv6 instead of RA, and I don't see how the DDNS fits in, but have a looked at dnsmasq used for DHCPv6?
– dirkt
2 days ago
Specifically, the RA gives up any kind of centralized management and lets every device manage it's own ip config. Which is awesome. But it's counter to my needs. And the way DDNS fits in is that I'm not going to leave the clients to request DDNS updates... instead the DHCP server will handle updating the DNS directly... which, again, "requires" centralized management of ip assignment. And that's a no on dnsmasq. Let me dig into it and get back to you.
– Cliff Armstrong
2 days ago
Specifically, the RA gives up any kind of centralized management and lets every device manage it's own ip config. Which is awesome. But it's counter to my needs. And the way DDNS fits in is that I'm not going to leave the clients to request DDNS updates... instead the DHCP server will handle updating the DNS directly... which, again, "requires" centralized management of ip assignment. And that's a no on dnsmasq. Let me dig into it and get back to you.
– Cliff Armstrong
2 days ago
Perhaps I'm missing something, but dnsmasq seems to have the same issue of requiring me to staticaly configure a prefix, dns ip, etc. And, while the thought of having dhcp and dns in a single daemon is appealing... I really don't like how dnsmasq does authoritative dns. But thank you for the suggestion. I keep forgetting dnsmasq offers dhcp functionality.
– Cliff Armstrong
2 days ago
Perhaps I'm missing something, but dnsmasq seems to have the same issue of requiring me to staticaly configure a prefix, dns ip, etc. And, while the thought of having dhcp and dns in a single daemon is appealing... I really don't like how dnsmasq does authoritative dns. But thank you for the suggestion. I keep forgetting dnsmasq offers dhcp functionality.
– Cliff Armstrong
2 days ago
No,
dnsmasq will take the IPv6 prefix from an existing interface, and this will be your ISP provided prefix. Not sure what you mean by "DNS IP", do you want another local DNS server in addition to dnsmasq?– dirkt
yesterday
No,
dnsmasq will take the IPv6 prefix from an existing interface, and this will be your ISP provided prefix. Not sure what you mean by "DNS IP", do you want another local DNS server in addition to dnsmasq?– dirkt
yesterday
option domain-name-server <ip address of dns server (which is my gateway's lan ip)>, 2606:4700:4700::1111, 2606:4700:4700::1001 How do I set that dynamically? And WINS? And all the other things dns is used to configure clients for? And I had planned to use BIND9 for authoritative dns on the local lan. I don't like how dnsmasq handles configuration of dns zones for authoritative dns. But the ability to grab the prefix from an existing interface sounds pretty handy.– Cliff Armstrong
yesterday
option domain-name-server <ip address of dns server (which is my gateway's lan ip)>, 2606:4700:4700::1111, 2606:4700:4700::1001 How do I set that dynamically? And WINS? And all the other things dns is used to configure clients for? And I had planned to use BIND9 for authoritative dns on the local lan. I don't like how dnsmasq handles configuration of dns zones for authoritative dns. But the ability to grab the prefix from an existing interface sounds pretty handy.– Cliff Armstrong
yesterday
|
show 2 more comments
1 Answer
1
active
oldest
votes
So, I said the next step was to write scripts. Well, here they are.
To explain, the solution I've come up with has two main parts. A template for the dhcpd.conf file. And a script to query the needed data from dhcpcd, parse it, apply it to the template, save the result as /var/local/dhcpd6-lan.conf, then restart dhcpd to use the new settings.
I do not like this solution. I will not be marking it as the accepted solution. I've put much effort into making it as rugged as possible but it still feels like too many points of potential failure. For now, it's getting the job done.
answered 14 mins ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f534478%2fdhcp-pd-on-wan-side-with-stateful-dhcpv6-assigned-globally-routable-ips-on-lan-s%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
So, I said the next step was to write scripts. Well, here they are.
To explain, the solution I've come up with has two main parts. A template for the dhcpd.conf file. And a script to query the needed data from dhcpcd, parse it, apply it to the template, save the result as /var/local/dhcpd6-lan.conf, then restart dhcpd to use the new settings.
I do not like this solution. I will not be marking it as the accepted solution. I've put much effort into making it as rugged as possible but it still feels like too many points of potential failure. For now, it's getting the job done.
answered 14 mins ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
add a comment |
So, I said the next step was to write scripts. Well, here they are.
To explain, the solution I've come up with has two main parts. A template for the dhcpd.conf file. And a script to query the needed data from dhcpcd, parse it, apply it to the template, save the result as /var/local/dhcpd6-lan.conf, then restart dhcpd to use the new settings.
I do not like this solution. I will not be marking it as the accepted solution. I've put much effort into making it as rugged as possible but it still feels like too many points of potential failure. For now, it's getting the job done.
answered 14 mins ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
add a comment |
So, I said the next step was to write scripts. Well, here they are.
To explain, the solution I've come up with has two main parts. A template for the dhcpd.conf file. And a script to query the needed data from dhcpcd, parse it, apply it to the template, save the result as /var/local/dhcpd6-lan.conf, then restart dhcpd to use the new settings.
I do not like this solution. I will not be marking it as the accepted solution. I've put much effort into making it as rugged as possible but it still feels like too many points of potential failure. For now, it's getting the job done.
answered 14 mins ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
So, I said the next step was to write scripts. Well, here they are.
To explain, the solution I've come up with has two main parts. A template for the dhcpd.conf file. And a script to query the needed data from dhcpcd, parse it, apply it to the template, save the result as /var/local/dhcpd6-lan.conf, then restart dhcpd to use the new settings.
I do not like this solution. I will not be marking it as the accepted solution. I've put much effort into making it as rugged as possible but it still feels like too many points of potential failure. For now, it's getting the job done.
answered 14 mins ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
answered 14 mins ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
answered 14 mins ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
answered 14 mins ago
Cliff ArmstrongCliff Armstrong
2661 gold badge3 silver badges13 bronze badges
2661 gold badge3 silver badges13 bronze badges
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f534478%2fdhcp-pd-on-wan-side-with-stateful-dhcpv6-assigned-globally-routable-ips-on-lan-s%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I am not sure what the rationale behind the decision is to use DHCPv6 instead of RA, and I don't see how the DDNS fits in, but have a looked at dnsmasq used for DHCPv6?
– dirkt
2 days ago
Specifically, the RA gives up any kind of centralized management and lets every device manage it's own ip config. Which is awesome. But it's counter to my needs. And the way DDNS fits in is that I'm not going to leave the clients to request DDNS updates... instead the DHCP server will handle updating the DNS directly... which, again, "requires" centralized management of ip assignment. And that's a no on dnsmasq. Let me dig into it and get back to you.
– Cliff Armstrong
2 days ago
Perhaps I'm missing something, but dnsmasq seems to have the same issue of requiring me to staticaly configure a prefix, dns ip, etc. And, while the thought of having dhcp and dns in a single daemon is appealing... I really don't like how dnsmasq does authoritative dns. But thank you for the suggestion. I keep forgetting dnsmasq offers dhcp functionality.
– Cliff Armstrong
2 days ago
No,
dnsmasqwill take the IPv6 prefix from an existing interface, and this will be your ISP provided prefix. Not sure what you mean by "DNS IP", do you want another local DNS server in addition todnsmasq?– dirkt
yesterday
option domain-name-server <ip address of dns server (which is my gateway's lan ip)>, 2606:4700:4700::1111, 2606:4700:4700::1001How do I set that dynamically? And WINS? And all the other things dns is used to configure clients for? And I had planned to use BIND9 for authoritative dns on the local lan. I don't like how dnsmasq handles configuration of dns zones for authoritative dns. But the ability to grab the prefix from an existing interface sounds pretty handy.– Cliff Armstrong
yesterday