Allocating fixed IPv6 addresses to hosts with multiple NICs

John.Gibbins at csiro.au John.Gibbins at csiro.au
Thu Jan 13 08:19:49 UTC 2011


Thanks Frank,

We are an Enterprise.  We want to have control over what machines are allowed on our network and to be able to easily identify them by their IP addresses.  EUI-64 and MS random addresses used by SLAAC make this hard so we want to use DHCPv6 to hand out addresses only to known machines.  We have a /32 block so we have an obscene number (2^96) of addresses to play with.

Regards
johng
--
John Gibbins
IT Security Operations (and IPv6 Evangelist)
CSIRO Information Management & Technology (IM&T)
Phone: +61 2 6124 1419  | Fax: +61 2 6124 1414 | Mob: 0419 605 562
John.Gibbins at csiro.au | www.csiro.au 
PO BOX 225, Dickson  ACT 2602
Do not let what you cannot do interfere with what you can do - John Wooden


-----Original Message-----
From: dhcp-users-bounces+john.gibbins=csiro.au at lists.isc.org [mailto:dhcp-users-bounces+john.gibbins=csiro.au at lists.isc.org] On Behalf Of Frank Bulk
Sent: Thursday, 13 January 2011 4:28 PM
To: dhcp-users at lists.isc.org
Subject: RE: Allocating fixed IPv6 addresses to hosts with multiple NICs

This doesn't really answer your question, but from an ISP perspective, since
most subscribers have a router at the edge of their network, both the IA and
PD will be stable.  

Sounds like a concern more in the enterprise space.

Frank

-----Original Message-----
From: dhcp-users-bounces+frnkblk=iname.com at lists.isc.org
[mailto:dhcp-users-bounces+frnkblk=iname.com at lists.isc.org] On Behalf Of
John.Gibbins at csiro.au
Sent: Tuesday, January 11, 2011 6:48 PM
To: dhcp-users at lists.isc.org
Subject: Allocating fixed IPv6 addresses to hosts with multiple NICs

Is anyone handing out fixed IPv6 addresses with ISC DHCP?

With IPv4 we hand out IP addresses based on MAC addresses ("hardware
Ethernet" and "fixed-address" config entries).
With IPv6 we hand out IP addresses based on DUID ("host-identifier option
dhcp6.client-id" and "fixed-address6" config entries).

Our problem is that the DUID is system specific and not NIC specific.  To
uniquely specify a NIC, I need to specify both the DUID and the IAID, but I
can't find any way of specifying an IAID.  This effectively makes DHCPv6
useless for us on systems with multiple NICs.

Is there a way of handing out different predefined IPv6 addresses to for
different NICs on a host?

I'm hoping that I've missed something (obvious or otherwise).  If not, I'll
need to investigate alternate implementations.

TIA
--
John Gibbins
IT Security Operations (and IPv6 Evangelist)
CSIRO Information Management & Technology (IM&T)
Phone: +61 2 6124 1419  | Fax: +61 2 6124 1414 | Mob: 0419 605 562
John.Gibbins at csiro.au | www.csiro.au 
PO BOX 225, Dickson  ACT 2602
Do not let what you cannot do interfere with what you can do - John Wooden

_______________________________________________
dhcp-users mailing list
dhcp-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/dhcp-users

_______________________________________________
dhcp-users mailing list
dhcp-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/dhcp-users



More information about the dhcp-users mailing list