Sunday, July 27, 2025

Re: help configuring an ipv6 wg vpn

Florian Obser <florian@openbsd.org> wrote:
> RFC 4291 2.1:
> All interfaces are required to have at least one Link-Local unicast
> address

thanks for the pointer! Now my question becomes how to add such address
to a wg(4) device however.

I've tried with a (dumb, but here's all i know) `inet6 autoconf' on the
wg device, as well as trying to add an address inside fe80::/10 manually
(inet6 fe80:fdd0::1/64 with or without alias, in hostname.if) to no
avail.

I mean:
# ifconfig wg3 create
# ifconfig wg3 inet6 autoconf
# ifconfig wg3
wg3: flags=2480c3<UP,BROADCAST,RUNNING,NOARP,MULTICAST,AUTOCONF6TEMP,AUTOCONF6> mtu 1420
index 14 priority 0 llprio 3
wgport 32884
groups: wg

but if I s/wg3/tap0 I get a fe80::something/64 address on it.


> With that in mind, read in6_ifattach() and weep.

ouch!

No comments:

Post a Comment