Re: Too-frequent change of privacy address / ND monitoring

2013-03-31 Thread Erik Kline
> > > I have in the past seen firewalls that dropped some critical packets but > > allowed others through (in one case: RS/RA were fine but ND was > > filtered, which led to IPv4 working in 3 second spurts, i.e. until NUD > > kicked in). > > That's assuming there was no link-local communication,

Re: Too-frequent change of privacy address / ND monitoring

2013-03-31 Thread Daniel Roesen
On Sun, Mar 31, 2013 at 02:57:20AM -0300, Fernando Gont wrote: > > Totally random crazy idea: could there be firewalls on some of these > > machines that are causing multicast RAs to be filtered but unicast RAs > > are fine (e.g. a unicast RA reply to an RS)? > > Not sure if "firewalls", but I c

Re: Too-frequent change of privacy address / ND monitoring

2013-03-31 Thread Fernando Gont
Hi, Erik, On 03/27/2013 04:47 AM, Erik Kline wrote: > Privacy addresses will very likely regenerate before such timer expires. > -- Actually, such timer shouldn't expire if you continue receiving > RAs... > > > I have in the past seen firewalls that dropped some critical packets but