Ask Your Question
1

RFC7217 (stable-privacy IPv6 addresses) support in Fedora 25

asked 2017-02-07 02:52:55 -0500

Fernando Gont gravatar image

Folks,

I'm the author of RFC7217, and was checking Fedora 25's support for that RFC. I've checked it, and I'm glad it supports RFC7217.

I have the following questions:

1) By default, is it NetworkManager support of RFC7217 that is relevant? -- i.e., I'm aware that there's a kernel support/implementation since Linux kernel 4.0

2) Is there any way to change the secretkey ("stable secret") parameter from the expression in RFC7217? It seems that the kernel has sysctl's for this (e.g., net.ipv6.conf.all.stablesecret et al), but it seems it's not possible to read or write them. OTOH, not sure if it is possible to change the stable secret in NetworkManager, and if possible, not sure how.

Thanks!

Best regards, Fernando

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
1

answered 2017-02-07 08:12:38 -0500

lobocode gravatar image

1- ) by default, all the most famous distributions, from 2016, comes with standard IPV6 implemented. Indeed, it is often necessary to disable it if not adapted.

2-) 2) Yes, is possible. You can do this as follows:

Edit /etc/default/grub add line

GRUB_CMDLINE_LINUX="ipv6.disable=0"

Edit /etc/sysctl.conf and add lines from disable IPV6:

net.ipv6.conf.all.disable_ipv6=0
net.ipv6.conf.default.disable_ipv6=0

Apply change

sudo sysctl -p /etc/sysctl.conf

Apply change in grub

sudo grub2-mkconfig -o /boot/grub2/grub.cfg

Apply change network

sudo systemctl restart network.service

edit flag offensive delete link more

Question Tools

1 follower

Stats

Asked: 2017-02-07 02:52:55 -0500

Seen: 494 times

Last updated: Feb 07 '17