DAD problem when a looped interface comes back up

Pekka Savola <pekkas@netcore.fi> Tue, 27 May 2008 06:34 UTC

Return-Path: <ipv6-bounces@ietf.org>
X-Original-To: ipv6-archive@megatron.ietf.org
Delivered-To: ietfarch-ipv6-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B9F1F3A688F; Mon, 26 May 2008 23:34:12 -0700 (PDT)
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6F1003A6844 for <ipv6@core3.amsl.com>; Mon, 26 May 2008 23:34:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.524
X-Spam-Level:
X-Spam-Status: No, score=-2.524 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KQyWTA8nuXgi for <ipv6@core3.amsl.com>; Mon, 26 May 2008 23:34:10 -0700 (PDT)
Received: from netcore.fi (eunet-gw.ipv6.netcore.fi [IPv6:2001:670:86:3001::1]) by core3.amsl.com (Postfix) with ESMTP id A33D83A688F for <ipv6@ietf.org>; Mon, 26 May 2008 23:34:09 -0700 (PDT)
Received: from netcore.fi (localhost [127.0.0.1]) by netcore.fi (8.13.8/8.13.8) with ESMTP id m4R6Y9CH031785 for <ipv6@ietf.org>; Tue, 27 May 2008 09:34:09 +0300
Received: from localhost (pekkas@localhost) by netcore.fi (8.13.8/8.13.8/Submit) with ESMTP id m4R6Y9hP031781 for <ipv6@ietf.org>; Tue, 27 May 2008 09:34:09 +0300
Date: Tue, 27 May 2008 09:34:08 +0300
From: Pekka Savola <pekkas@netcore.fi>
To: ipv6@ietf.org
Subject: DAD problem when a looped interface comes back up
In-Reply-To: <20080527061615.GC426@greenie.muc.de>
Message-ID: <alpine.LRH.1.10.0805270930570.31523@netcore.fi>
References: <5.1.0.14.2.20080527025233.00b1dc60@efes.iucc.ac.il> <20080527061615.GC426@greenie.muc.de>
User-Agent: Alpine 1.10 (LRH 962 2008-03-14)
MIME-Version: 1.0
X-Virus-Scanned: ClamAV 0.93/6816/Fri Apr 18 03:41:09 2008 on otso.netcore.fi
X-Virus-Status: Clean
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://www.ietf.org/mailman/private/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ipv6-bounces@ietf.org
Errors-To: ipv6-bounces@ietf.org

FYI,

This issue, from cisco-nsp list, might be of interest here.  When an 
interface is looped, it will fail DAD, and if the condition lasts long 
enough, you might not recover from it automatically.

On Tue, 27 May 2008, Gert Doering wrote:
> On Tue, May 27, 2008 at 03:00:26AM +0300, Hank Nussbacher wrote:
>> When we did some line testing and did some loop testing on the link we got:
>> %IPV6-4-DUPLICATE: Duplicate address FE80::215:2CFF:FE87:B240 on POS11/0/0
>>
>> petach-tikva-gp# sho ipv6 int pos11/0/0
>> POS11/0/0 is up, line protocol is up
>>    IPv6 is stalled, link-local address is FE80::215:2CFF:FE87:B240 [DUP]
> [..]
>
>> I know I can use "ipv6 nd dad attempts 5" but wanted to know whether I
>> should open a TAC case for this.
>
> I have seen this as well, and it's especially annoying if it happens
> as consequence of a link outage from the carrier (link going down, going
> into "loop" state, then coming back to "up") - if you're unlucky, a short
> glitch can kill your IPv6 on the line hard until you manually reset the
> interface.
>
> The current behaviour is pretty much a direct consequence from the RFC
> (DAD is mandatory), but I think that IOS could be a bit more smart about
> it, like "restart DAD every 5 minutes" or "recognize a looped->up
> transition on the interface, and then restart DAD".
>
> So - by all means, please open a TAC case.
>
> As a workaround, we have used "ipv6 nd dad attempts 5" on the specific
> line that gave us headaches - so we've never pressed the issue with Cisco.
>
> gert
>
>
>

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------