summaryrefslogtreecommitdiffstats
path: root/src/etc
diff options
context:
space:
mode:
authorPhil Davis <phil.davis@inf.org>2016-09-12 10:50:23 +0930
committerPhil Davis <phil.davis@inf.org>2016-09-12 10:50:23 +0930
commite89a17fbf04aae89f60f13baf293f397ca21c303 (patch)
tree5521dbd2ff6d523f0c6b36e7ff33395bab59988c /src/etc
parentd2013d12579b151307c8f41c1e29a13c56522198 (diff)
downloadpfsense-e89a17fbf04aae89f60f13baf293f397ca21c303.zip
pfsense-e89a17fbf04aae89f60f13baf293f397ca21c303.tar.gz
Fix #6768 IPv6 static mapping on delegated prefixes
For example, WAN receives a /48 delegated from the upstream (ISP...), e.g. "2001:470:abcd::" pfSense then uses this as a starting point to calculate the addresses on LAN, OPT1, OPT2 etc where they have been specified asa "track interface WAN". Actually each local interface gets just a /64 taken out of the /48, using the chunk specified by "IPv6 Prefix Id" for that local interface. e.g. if "IPv6 Prefix Id" is set to "a1" on LAN, then the LAN would be: 2001:470:abcd:00a1::/64 Then when we specify a static-mapped address in LAN, or other things that live in LAN, e.g. "::4242" we mean 4242 on from the base LAN address, so "2001:470:abcd:00a1::4242" i.e. we always have a CIDR of 64 when calculating this stuff. We do not want the logic that was in this code that was using the upstream prefix delegation size (like /48). Note: The code in services.inc "worked" because var $ifname was not set, and so $trackifname was blank, $trackcfg was blank, and so the attempted calculation of $pdlen always came out as 64 anyway. That tricked me for a while trying to understand why the use in service.inc worked. system.inc did not work, because it actually claculated $pdlen and got a number like 48 - which actually we do not want here.
Diffstat (limited to 'src/etc')
-rw-r--r--src/etc/inc/services.inc11
-rw-r--r--src/etc/inc/system.inc6
2 files changed, 7 insertions, 10 deletions
diff --git a/src/etc/inc/services.inc b/src/etc/inc/services.inc
index 66f1062..b5adc7f 100644
--- a/src/etc/inc/services.inc
+++ b/src/etc/inc/services.inc
@@ -1346,12 +1346,11 @@ EOD;
}
$ifcfgsnv6 = get_interface_subnetv6($dhcpv6if);
$subnetv6 = gen_subnetv6($ifcfgipv6, $ifcfgsnv6);
-
- if ($ifcfgv6['ipaddrv6'] == 'track6') {
- $trackifname = $config['interfaces'][$ifname]['track6-interface'];
- $trackcfg = $config['interfaces'][$trackifname];
- $pdlen = 64 - $trackcfg['dhcp6-ia-pd-len'];
- }
+ // We might have some prefix-delegation on WAN (e.g. /48),
+ // but then it is split and given out to individual interfaces
+ // (LAN, OPT1, OPT2...) as multiple /64 subnets. So the size
+ // of each subnet here is always /64.
+ $pdlen = 64;
if ($is_olsr_enabled == true) {
if ($dhcpv6ifconf['netmask']) {
diff --git a/src/etc/inc/system.inc b/src/etc/inc/system.inc
index 229add7..b205e1d 100644
--- a/src/etc/inc/system.inc
+++ b/src/etc/inc/system.inc
@@ -393,10 +393,8 @@ function system_hosts_generate() {
$ipaddrv6 = $host['ipaddrv6'];
if ($ipaddrv6 && $host['hostname']) {
if ($isdelegated) {
- $trackifname = $config['interfaces'][$dhcpif]['track6-interface'];
- $trackcfg = $config['interfaces'][$trackifname];
- $pdlen = 64 - $trackcfg['dhcp6-ia-pd-len'];
- $ipaddrv6 = merge_ipv6_delegated_prefix(get_interface_ipv6($dhcpif), $ipaddrv6, $pdlen);
+ // We are always in an "end-user" subnet here, which all are /64 for IPv6.
+ $ipaddrv6 = merge_ipv6_delegated_prefix(get_interface_ipv6($dhcpif), $ipaddrv6, 64);
}
if ($host['domain']) {
$dhosts .= "{$ipaddrv6} {$host['hostname']}.{$host['domain']}\n";
OpenPOWER on IntegriCloud