Re: [Snac] Router using Ipv6 prefix length = 67

Jonathan Hui <jonhui@google.com> Mon, 05 June 2023 22:25 UTC

Return-Path: <jonhui@google.com>
X-Original-To: snac@ietfa.amsl.com
Delivered-To: snac@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F936C15108E for <snac@ietfa.amsl.com>; Mon, 5 Jun 2023 15:25:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -22.596
X-Spam-Level:
X-Spam-Status: No, score=-22.596 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, ENV_AND_HDR_SPF_MATCH=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001, USER_IN_DEF_DKIM_WL=-7.5, USER_IN_DEF_SPF_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gjxoHX0dFqJd for <snac@ietfa.amsl.com>; Mon, 5 Jun 2023 15:25:03 -0700 (PDT)
Received: from mail-ed1-x532.google.com (mail-ed1-x532.google.com [IPv6:2a00:1450:4864:20::532]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B2DAC14CE3F for <snac@ietf.org>; Mon, 5 Jun 2023 15:25:02 -0700 (PDT)
Received: by mail-ed1-x532.google.com with SMTP id 4fb4d7f45d1cf-51400fa347dso3607a12.0 for <snac@ietf.org>; Mon, 05 Jun 2023 15:25:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20221208; t=1686003901; x=1688595901; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=2Q1i0Y0ka1it9nYi47TQumPWyZzB183ffMdfV9KXon8=; b=qeTMdKloKoMqK18TneU06lxOHTPha0yDS+UMg3Pwo4tmjPgoJuN8kw8VoWK/1pHJh8 OmShcw2Govr7ev5NxYCzxLS+pFLPGJeKrRRcWFdKhQFvV1E4Auoa8YMlvNiMvFdIApkf 8EfHm66m/ElopW3A0FLpLA48JPNPgt3CwUyMjroDEjkcclHVU8xrNOMlg4+R3Iug1J8P bdtxnI4gc5XXjyyLq/QfCyTEDaCmcdkR1H+9LCeyZA8giDKJHE+d4dYR7p9b4KK7qNAE qkveBfTZhlHvJP1fkNGzBPF7EKhEB4gLTvo0FrneXs0fgKMMIZZPnQNBlOBBucCJF5D3 8N4g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1686003901; x=1688595901; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=2Q1i0Y0ka1it9nYi47TQumPWyZzB183ffMdfV9KXon8=; b=gCAEToBZbxTTlbQrYlNSKkrYxGHEWsZAkJ/XVM4N8ZZZ1D9Pvl4koYICJI2yM98HIw lCmXOz66vJ/vjG1gXjk9fBND8Dfq/55pl0mfhRpqHiHB1zuU128vUj6RxbPnnolgEoBu HYCji1tWvyxBwxIcb39+zWnvZC/MHnIi16z6II0Mdvpg8b+dmZtjeX15tk4kZKoQxKhw yN5h4VkG94cFLO9ppadgMUfhXD0xPu0po5+BSHkZhoXMb0P01eRMjNArSKR7Fx7Pwmks 6KR4LE6F7ZzrtX9mXKAM7AQtQEY8ylpRuDcz6rmhtkYhHARWAf9Zba+YUINrpvk5xcib cYoA==
X-Gm-Message-State: AC+VfDz7TxEpb3xPZpMy9YPjxXnU6AwVFOOO82F6mq+IG4bkCjkChab5 tf7M7HxXv7ZP8Y731+rubyJXBeIU+uLofmVHoifdYg==
X-Google-Smtp-Source: ACHHUZ6bdCUQxyNFF/gN++YJe1xY3C3w1j/1hESJX744XCi3cl3LV3hmfasRYbx1GdzqB1O8cKU4pggHSVk8/gFZdLI=
X-Received: by 2002:a50:c04c:0:b0:510:b2b7:8a78 with SMTP id u12-20020a50c04c000000b00510b2b78a78mr7172edd.5.1686003900463; Mon, 05 Jun 2023 15:25:00 -0700 (PDT)
MIME-Version: 1.0
References: <39BE8173-F4D2-4B8C-A136-A5A7F441B3BF@amazon.com> <10B44E76-01E1-4A09-881D-2228B4E07508@amazon.com>
In-Reply-To: <10B44E76-01E1-4A09-881D-2228B4E07508@amazon.com>
From: Jonathan Hui <jonhui@google.com>
Date: Mon, 05 Jun 2023 15:24:48 -0700
Message-ID: <CAGwZUDvWAnFJO4KJCyd0k_ydxzZaxEZ+D9-WXFCb_gfOHWOPwA@mail.gmail.com>
To: "Collins, Alan" <alaclli=40amazon.com@dmarc.ietf.org>
Cc: "snac@ietf.org" <snac@ietf.org>, Gabe Kassel <gabe@eero.com>
Content-Type: multipart/related; boundary="00000000000095201105fd695ff1"
Archived-At: <https://mailarchive.ietf.org/arch/msg/snac/GxmSCvBQ6TEOD72N3GI5Bbk0BP0>
Subject: Re: [Snac] Router using Ipv6 prefix length = 67
X-BeenThere: snac@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Mailing list for discussing problems relating to the automatic connection of stub networks to existing infrastructure networks. " <snac.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/snac>, <mailto:snac-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/snac/>
List-Post: <mailto:snac@ietf.org>
List-Help: <mailto:snac-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/snac>, <mailto:snac-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Jun 2023 22:25:04 -0000

Hi Alan,

Thanks for sharing this information.

It seems the Netgear WNP3000 is not conformant to RFC 7084 Section 4.3
<https://datatracker.ietf.org/doc/html/rfc7084#section-4.3> and RFC 2464
Section 4 <https://datatracker.ietf.org/doc/html/rfc2464#section-4>. That
said, I think it makes sense for the stub router implementation to be
defensive in these situations and include prefix length in the definition
of a "usable prefix".

As for spec text, draft-ietf-snac-simple-01 Section 5.1.1 already states:

   IPv6 addressing is considered to be present on the link if a usable
   on-link prefix is advertised on the adjacent infrastructure link.  A
   usable on-link prefix is a prefix advertised on the link that has a
   preferred time of 30 minutes or more, is marked on-link and allows
   autonomous configuration.

One could argue that "allows autonomous configuration" already covers this
requirement, given that RFC 2464 Section 4 states:

   An IPv6 address prefix used for stateless autoconfiguration [ACONF]
   of an Ethernet interface must have a length of 64 bits.

If we wanted to make a change, we could add some clarifying text like:

   A prefix that allows autonomous configuration includes having the PIO
   A-flag set to 1 and required prefix length for the given link.

Thoughts?

--
Jonathan Hui



On Sun, Jun 4, 2023 at 10:33 AM Collins, Alan <alaclli=
40amazon.com@dmarc.ietf.org> wrote:

>
>
> Hello Ted, Jonathan.
>
>
>
>                 We have multiple test setups testing Matter over Thread
> back-to-back pairing while connected to infrastructure using different
> (hundreds) of Wifi AP with default settings. The setup:
>
>
>
> Recently, while using Netgear WNP3000 , the Matter pairing failed. The
> non-thread matter controller is not getting an IPv6 global address, so even
> that the routing table contains the prefix to reach into the Thread BR, the
> IP stack does not allow it without a global IP of its own.
>
>
>
> Thread BR is only sending icmpv6 RA with RIO. The PIO is not included
> because there is another router in the network already sending PIO.
>
> However, since that PIO has length = 67, the non-Thread matter controller
> won’t use it to create a global IP. It’s not even sending NS for DAD.
>
>
>
>
>
> We think the abnormal ipv6 PIO prefix RA is from the backend Cisco OUI MAC
> address. We are investigating.
>
>
>
> However, this opens an opportunity to create a more robust behavior from
> Thread BR, to add more logic into processing the existing PIO before
> deciding not to send a PIO of its own.
>
>
>
> Thank you in advance for looking into this.
>
>
>
> Cheers,
>
> Alan Collins
>
>
>
>
>
>
> --
> Snac mailing list
> Snac@ietf.org
> https://www.ietf.org/mailman/listinfo/snac
>