Bug #3656
closed
"LAN network" in v6 rules doesn't work when assigning link-local address to LAN
Added by Chris Buechler over 10 years ago.
Updated about 9 years ago.
Affected Version:
2.1-IPv6
Description
If you configure a link-local address on an interface, that interface's "network" subnet fails being looked up. For instance, go to Interfaces>LAN, configure it for static IPv6 fe80::1:1/64 for instance, add a v6 rule specifying "LAN subnet" as the source, and you end up with:
# at the break! label "USER_RULE: Default allow LAN IPv6 to any rule"
note for others who happen upon this, this really isn't a valid config. But there isn't any reason it shouldn't work.
- Assignee set to Renato Botelho
- Status changed from New to Confirmed
still an issue on latest snapshot. the LAN rule in that scenario ends up as a comment with "at the break".
- Priority changed from Normal to Low
- Target version changed from 2.2 to 2.2.1
- Target version changed from 2.2.1 to 2.2.2
This also affects rules with "LAN Interface" not just "LAN Subnet" as source/destination. In order for the rules with "LAN Interface" to work get_interface_ipv6() would have to return link-local address, but that would most likely break quite a few other things. Since this is not really a valid config why not put validation on interface page that would prevent user from assigning fe80::/10 address.
- Target version changed from 2.2.2 to 2.2.3
- Target version changed from 2.2.3 to 2.3
- Status changed from Confirmed to Resolved
- Assignee changed from Renato Botelho to Chris Buechler
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by