summaryrefslogtreecommitdiff
path: root/templates/system/ipv6/strict-dad/node.def
diff options
context:
space:
mode:
Diffstat (limited to 'templates/system/ipv6/strict-dad/node.def')
-rw-r--r--templates/system/ipv6/strict-dad/node.def26
1 files changed, 26 insertions, 0 deletions
diff --git a/templates/system/ipv6/strict-dad/node.def b/templates/system/ipv6/strict-dad/node.def
new file mode 100644
index 00000000..f3947eef
--- /dev/null
+++ b/templates/system/ipv6/strict-dad/node.def
@@ -0,0 +1,26 @@
+help: Disable IPv6 operation on interface when DAD fails on LL addr
+
+# Enable strict DAD behavior. Disable IPv6 operation on an interface
+# if DAD fails on the EUI-64 based link-local address.
+#
+create:
+ sudo sh -c "echo 2 > /proc/sys/net/ipv6/conf/all/accept_dad"
+ sudo sh -c "echo 2 > /proc/sys/net/ipv6/conf/default/accept_dad"
+ for ifname in /sys/class/net/eth* ; do
+ if [ -d $ifname ]; then
+ ifname=${ifname#/sys/class/net/}
+ sudo sh -c "echo 2 > /proc/sys/net/ipv6/conf/$ifname/accept_dad"
+ fi
+ done
+
+
+# Revert back to liberal DAD behavior
+delete:
+ sudo sh -c "echo 1 > /proc/sys/net/ipv6/conf/all/accept_dad"
+ sudo sh -c "echo 1 > /proc/sys/net/ipv6/conf/default/accept_dad"
+ for ifname in /sys/class/net/eth* ; do
+ if [ -d $ifname ]; then
+ ifname=${ifname#/sys/class/net/}
+ sudo sh -c "echo 1 > /proc/sys/net/ipv6/conf/$ifname/accept_dad"
+ fi
+ done