From 4d721a58020971d00ab854c37b68e88359999f9c Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Tue, 19 Dec 2023 07:49:03 +0100 Subject: T2898: add ndp-proxy service VyOS CLI command set service ndp-proxy interface eth0 prefix 2001:db8::/64 mode 'static' Will generate the following NDP proxy configuration $ cat /run/ndppd/ndppd.conf # autogenerated by service_ndp-proxy.py # This tells 'ndppd' how often to reload the route file /proc/net/ipv6_route route-ttl 30000 # This sets up a listener, that will listen for any Neighbor Solicitation # messages, and respond to them according to a set of rules proxy eth0 { # Turn on or off the router flag for Neighbor Advertisements router no # Control how long to wait for a Neighbor Advertisment message before invalidating the entry (milliseconds) timeout 500 # Control how long a valid or invalid entry remains in the cache (milliseconds) ttl 30000 # This is a rule that the target address is to match against. If no netmask # is provided, /128 is assumed. You may have several rule sections, and the # addresses may or may not overlap. rule 2001:db8::/64 { static } } --- interface-definitions/service_ndp-proxy.xml.in | 132 +++++++++++++++++++++++++ 1 file changed, 132 insertions(+) create mode 100644 interface-definitions/service_ndp-proxy.xml.in (limited to 'interface-definitions/service_ndp-proxy.xml.in') diff --git a/interface-definitions/service_ndp-proxy.xml.in b/interface-definitions/service_ndp-proxy.xml.in new file mode 100644 index 000000000..9801c99ab --- /dev/null +++ b/interface-definitions/service_ndp-proxy.xml.in @@ -0,0 +1,132 @@ + + + + + + + Neighbor Discovery Protocol (NDP) Proxy + + + + + Refresh interval for IPv6 routes + + u32:10000-120000 + Time in milliseconds + + + + + Route-refresh must be between 10000 and 120000 milliseconds + + 30000 + + + + NDP proxy listener interface + + + + + #include + + + + #include + + + Enable router bit in Neighbor Advertisement messages + + + + + + Timeout for Neighbor Advertisement after Neighbor Solicitation message + + u32:500-120000 + Timeout in milliseconds + + + + + Timeout must be between 500 and 120000 milliseconds + + 500 + + + + Proxy entry cache Time-To-Live + + u32:10000-120000 + Time in milliseconds + + + + + TTL must be between 10000 and 120000 milliseconds + + 30000 + + + + Prefix target addresses are matched against + + ipv6net + IPv6 network prefix + + + ipv6 + IPv6 address + + + + + + + + #include + + + Specify the running mode of the rule + + static auto interface + + + static + Immediately answer any Neighbor Solicitation Messages + + + auto + Check for a matching route in /proc/net/ipv6_route + + + interface + Forward Neighbor Solicitation message through specified interface + + + (static|auto|interface) + + Mode must be either one of: static, auto or interface + + static + + + + Interface to forward Neighbor Solicitation message through. Required for "iface" mode + + + + + #include + + + + + + + + + + + + -- cgit v1.2.3