summaryrefslogtreecommitdiff
path: root/src/etc/sysctl.d
diff options
context:
space:
mode:
authorJernej Jakob <jernej.jakob@gmail.com>2020-04-22 17:47:03 +0200
committerJernej Jakob <jernej.jakob@gmail.com>2020-04-23 16:09:38 +0200
commitc6997f0ca98c628dd85f1789ce53e495e9a451bc (patch)
tree9432868ae73243cdb1aba3b1ba58ebf5d0b414c3 /src/etc/sysctl.d
parentc87a5a1e1f52cddf113f427ea902f45a2e2a8445 (diff)
downloadvyos-1x-c6997f0ca98c628dd85f1789ce53e495e9a451bc.tar.gz
vyos-1x-c6997f0ca98c628dd85f1789ce53e495e9a451bc.zip
interfaces: T2362: sysctl to not generate IPv6 link-local addreses by default
Diffstat (limited to 'src/etc/sysctl.d')
-rw-r--r--src/etc/sysctl.d/31-vyos-addr_gen_mode.conf14
1 files changed, 14 insertions, 0 deletions
diff --git a/src/etc/sysctl.d/31-vyos-addr_gen_mode.conf b/src/etc/sysctl.d/31-vyos-addr_gen_mode.conf
new file mode 100644
index 000000000..07a0d1584
--- /dev/null
+++ b/src/etc/sysctl.d/31-vyos-addr_gen_mode.conf
@@ -0,0 +1,14 @@
+### Added by vyos-1x ###
+#
+# addr_gen_mode - INTEGER
+# Defines how link-local and autoconf addresses are generated.
+#
+# 0: generate address based on EUI64 (default)
+# 1: do no generate a link-local address, use EUI64 for addresses generated
+# from autoconf
+# 2: generate stable privacy addresses, using the secret from
+# stable_secret (RFC7217)
+# 3: generate stable privacy addresses, using a random secret if unset
+#
+net.ipv6.conf.all.addr_gen_mode = 1
+net.ipv6.conf.default.addr_gen_mode = 1