Re: Why has RFC 4941 been designed in such a way, that it might cause address conflicts?

Philip Homburg <pch-6man@u-1.phicoh.com> Tue, 15 March 2011 18:26 UTC

Return-Path: <pch-b6B5344D9@u-1.phicoh.com>
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 493703A6E44 for <ipv6@core3.amsl.com>; Tue, 15 Mar 2011 11:26:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.599
X-Spam-Level:
X-Spam-Status: No, score=-4.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, GB_I_LETTER=-2]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XA-XXKqVFlfx for <ipv6@core3.amsl.com>; Tue, 15 Mar 2011 11:26:36 -0700 (PDT)
Received: from stereo.hq.phicoh.net (stereo.hq.phicoh.net [130.37.15.35]) by core3.amsl.com (Postfix) with ESMTP id AC55A3A6D78 for <ipv6@ietf.org>; Tue, 15 Mar 2011 11:26:34 -0700 (PDT)
Received: from stereo.hq.phicoh.net ([127.0.0.1]) by stereo.hq.phicoh.net with esmtp (Smail #2) id m1PzYyK-0001NyC; Tue, 15 Mar 2011 19:27 +0100
Message-Id: <m1PzYyK-0001NyC@stereo.hq.phicoh.net>
To: Markus Hanauska <hanauska@equinux.de>
Subject: Re: Why has RFC 4941 been designed in such a way, that it might cause address conflicts?
From: Philip Homburg <pch-6man@u-1.phicoh.com>
Sender: pch-b6B5344D9@u-1.phicoh.com
References: <m1PzWdR-0001h0C@stereo.hq.phicoh.net> <8B79EE39-3033-4120-AB28-6C023C089F70@equinux.de>
In-reply-to: Your message of "Tue, 15 Mar 2011 19:04:48 +0100 ." <8B79EE39-3033-4120-AB28-6C023C089F70@equinux.de>
Date: Tue, 15 Mar 2011 19:27:44 +0100
Cc: ipv6@ietf.org
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Mar 2011 18:26:37 -0000

In your letter dated Tue, 15 Mar 2011 19:04:48 +0100 you wrote:
>On 2011-03-15, at 16:58 , Philip Homburg wrote:
>
>> I think the answer is that is statistically very unlikely that on a =
>single
>> subnet, a 64-bit random number will ever be equal to any address =
>manually
>> configured in DHCP.
>
>I'd say this entirely depends on how the (usually pseudo-) random number =
>has been created. No RFC says it is forbidden to choose a random IPv6 =
>address by simply picking a number between 1-255 and pad all the bits to =
>the left with zeros. It may not be very advisable to do that, but it is =
>not disallowed either. 

Yes, it is possible that some junior programmer doesn't know how to generate
a 64-bit random number. Hopefully people will figure out that some device is
broken in that regard and get the manufacturer to fix it.

But there is an easy fix for you. What if you put something in those
bytes? If you come up with a number that relates to just your
organisation, then it is very unlikely that a broken random number generator
will generate exactly that pattern.

If you just need stable addresses, then you can also put your own random
numbers in DHCP. 

>How would two ethernet cards have the same MAC address, unless it has =
>been manually configured? Doesn't globally unique mean "globally unique" =
>anymore?

No, it never did. That's the problem. From manufacturing defects (a batch
of cards all with the same ethernet address), small mistakes (a manufacturer
reusing a range) to companies that doen't know how it works and just use
some random vendor id, to cards that can just be jumpered to look some
other vendor's cards because that is what the software expects.