Debian – How to disable automatic IPv6 neighbor route advertisement on a router

debianipv6routing

I work for an ISP that's in the process of making its infrastructure IPv6-ready. Our core routers already have a working setup, but a large portion of our fiber customers are behind a router running Debian Squeeze.

Enabling IPv6 capabilities on linux wasn't a problem, however, once we assigned an IPv6 address and working routes to the linux router it immediately transmitted working addresses and routes to all systems behind it, which kind of wasn't what we want.

Our current plan involves setting IPv6 addresses manually on all systems, but I can't seem to find the switch or option to tell the kernel to not perform router advertisements.

Any suggestions?

Best Answer

to disable RA acceptance:

sysctl -w net.ipv6.conf.<interface>.forwarding=0
sysctl -w net.ipv6.conf.all.forwarding=0
sysctl -w net.ipv6.conf.<interface>.accept_ra=0
sysctl -w net.ipv6.conf.all.accept_ra=0

or add something like this to /etc/network/interfaces

pre-up echo 0 > /proc/sys/net/ipv6/conf/<interface>/forwarding
pre-up echo 0 > /proc/sys/net/ipv6/conf/<interface>/accept_ra
pre-up echo 0 > /proc/sys/net/ipv6/conf/all/accept_ra
pre-up echo 0 > /proc/sys/net/ipv6/conf/default/accept_ra
Related Question