nd6_rtr.c revision 1.108 1 1.108 ozaki /* $NetBSD: nd6_rtr.c,v 1.108 2016/04/04 07:37:07 ozaki-r Exp $ */
2 1.20 itojun /* $KAME: nd6_rtr.c,v 1.95 2001/02/07 08:09:47 itojun Exp $ */
3 1.3 thorpej
4 1.2 itojun /*
5 1.2 itojun * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
6 1.2 itojun * All rights reserved.
7 1.16 itojun *
8 1.2 itojun * Redistribution and use in source and binary forms, with or without
9 1.2 itojun * modification, are permitted provided that the following conditions
10 1.2 itojun * are met:
11 1.2 itojun * 1. Redistributions of source code must retain the above copyright
12 1.2 itojun * notice, this list of conditions and the following disclaimer.
13 1.2 itojun * 2. Redistributions in binary form must reproduce the above copyright
14 1.2 itojun * notice, this list of conditions and the following disclaimer in the
15 1.2 itojun * documentation and/or other materials provided with the distribution.
16 1.2 itojun * 3. Neither the name of the project nor the names of its contributors
17 1.2 itojun * may be used to endorse or promote products derived from this software
18 1.2 itojun * without specific prior written permission.
19 1.16 itojun *
20 1.2 itojun * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 1.2 itojun * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 1.2 itojun * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 1.2 itojun * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 1.2 itojun * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 1.2 itojun * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 1.2 itojun * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 1.2 itojun * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 1.2 itojun * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 1.2 itojun * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 1.2 itojun * SUCH DAMAGE.
31 1.2 itojun */
32 1.27 lukem
33 1.27 lukem #include <sys/cdefs.h>
34 1.108 ozaki __KERNEL_RCSID(0, "$NetBSD: nd6_rtr.c,v 1.108 2016/04/04 07:37:07 ozaki-r Exp $");
35 1.2 itojun
36 1.2 itojun #include <sys/param.h>
37 1.2 itojun #include <sys/systm.h>
38 1.2 itojun #include <sys/malloc.h>
39 1.2 itojun #include <sys/mbuf.h>
40 1.2 itojun #include <sys/socket.h>
41 1.2 itojun #include <sys/sockio.h>
42 1.2 itojun #include <sys/time.h>
43 1.2 itojun #include <sys/kernel.h>
44 1.2 itojun #include <sys/errno.h>
45 1.2 itojun #include <sys/ioctl.h>
46 1.2 itojun #include <sys/syslog.h>
47 1.82 tls #include <sys/cprng.h>
48 1.2 itojun
49 1.2 itojun #include <net/if.h>
50 1.2 itojun #include <net/if_types.h>
51 1.2 itojun #include <net/if_dl.h>
52 1.2 itojun #include <net/route.h>
53 1.2 itojun #include <net/radix.h>
54 1.2 itojun
55 1.2 itojun #include <netinet/in.h>
56 1.2 itojun #include <netinet6/in6_var.h>
57 1.56 rpaulo #include <netinet6/in6_ifattach.h>
58 1.11 itojun #include <netinet/ip6.h>
59 1.2 itojun #include <netinet6/ip6_var.h>
60 1.2 itojun #include <netinet6/nd6.h>
61 1.11 itojun #include <netinet/icmp6.h>
62 1.75 thorpej #include <netinet6/icmp6_private.h>
63 1.54 rpaulo #include <netinet6/scope6_var.h>
64 1.2 itojun
65 1.7 itojun #include <net/net_osdep.h>
66 1.2 itojun
67 1.68 dyoung static int rtpref(struct nd_defrouter *);
68 1.68 dyoung static struct nd_defrouter *defrtrlist_update(struct nd_defrouter *);
69 1.68 dyoung static int prelist_update(struct nd_prefixctl *, struct nd_defrouter *,
70 1.68 dyoung struct mbuf *, int);
71 1.68 dyoung static struct in6_ifaddr *in6_ifadd(struct nd_prefixctl *, int);
72 1.68 dyoung static struct nd_pfxrouter *pfxrtr_lookup(struct nd_prefix *,
73 1.68 dyoung struct nd_defrouter *);
74 1.68 dyoung static void pfxrtr_add(struct nd_prefix *, struct nd_defrouter *);
75 1.68 dyoung static void pfxrtr_del(struct nd_pfxrouter *);
76 1.32 itojun static struct nd_pfxrouter *find_pfxlist_reachable_router
77 1.68 dyoung (struct nd_prefix *);
78 1.68 dyoung static void defrouter_delreq(struct nd_defrouter *);
79 1.68 dyoung
80 1.68 dyoung static int in6_init_prefix_ltimes(struct nd_prefix *);
81 1.83 christos static void in6_init_address_ltimes(struct nd_prefix *,
82 1.83 christos struct in6_addrlifetime *);
83 1.83 christos static void purge_detached(struct ifnet *);
84 1.2 itojun
85 1.65 dyoung static int rt6_deleteroute(struct rtentry *, void *);
86 1.2 itojun
87 1.2 itojun extern int nd6_recalc_reachtm_interval;
88 1.2 itojun
89 1.28 itojun static struct ifnet *nd6_defifp;
90 1.7 itojun int nd6_defifindex;
91 1.7 itojun
92 1.56 rpaulo int ip6_use_tempaddr = 0;
93 1.56 rpaulo
94 1.56 rpaulo int ip6_desync_factor;
95 1.56 rpaulo u_int32_t ip6_temp_preferred_lifetime = DEF_TEMP_PREFERRED_LIFETIME;
96 1.56 rpaulo u_int32_t ip6_temp_valid_lifetime = DEF_TEMP_VALID_LIFETIME;
97 1.56 rpaulo int ip6_temp_regen_advance = TEMPADDR_REGEN_ADVANCE;
98 1.56 rpaulo
99 1.81 spz int nd6_numroutes = 0;
100 1.81 spz
101 1.56 rpaulo /* RTPREF_MEDIUM has to be 0! */
102 1.56 rpaulo #define RTPREF_HIGH 1
103 1.56 rpaulo #define RTPREF_MEDIUM 0
104 1.56 rpaulo #define RTPREF_LOW (-1)
105 1.56 rpaulo #define RTPREF_RESERVED (-2)
106 1.56 rpaulo #define RTPREF_INVALID (-3) /* internal */
107 1.56 rpaulo
108 1.101 ozaki static inline bool
109 1.101 ozaki nd6_is_llinfo_probreach(struct nd_defrouter *dr)
110 1.101 ozaki {
111 1.105 ozaki struct llentry *ln = NULL;
112 1.101 ozaki
113 1.108 ozaki ln = nd6_lookup(&dr->rtaddr, dr->ifp, false);
114 1.108 ozaki if (ln == NULL)
115 1.101 ozaki return false;
116 1.108 ozaki
117 1.108 ozaki if (!ND6_IS_LLINFO_PROBREACH(ln)) {
118 1.108 ozaki LLE_RUNLOCK(ln);
119 1.101 ozaki return false;
120 1.108 ozaki }
121 1.101 ozaki
122 1.108 ozaki LLE_RUNLOCK(ln);
123 1.101 ozaki return true;
124 1.101 ozaki }
125 1.101 ozaki
126 1.2 itojun /*
127 1.2 itojun * Receive Router Solicitation Message - just for routers.
128 1.81 spz * Router solicitation/advertisement is mostly managed by a userland program
129 1.2 itojun * (rtadvd) so here we have no function like nd6_ra_output().
130 1.2 itojun *
131 1.2 itojun * Based on RFC 2461
132 1.2 itojun */
133 1.2 itojun void
134 1.64 christos nd6_rs_input(struct mbuf *m, int off, int icmp6len)
135 1.2 itojun {
136 1.2 itojun struct ifnet *ifp = m->m_pkthdr.rcvif;
137 1.79 tonnerre struct nd_ifinfo *ndi = ND_IFINFO(ifp);
138 1.2 itojun struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
139 1.12 itojun struct nd_router_solicit *nd_rs;
140 1.2 itojun struct in6_addr saddr6 = ip6->ip6_src;
141 1.2 itojun char *lladdr = NULL;
142 1.2 itojun int lladdrlen = 0;
143 1.2 itojun union nd_opts ndopts;
144 1.2 itojun
145 1.2 itojun /* If I'm not a router, ignore it. */
146 1.80 dyoung if (nd6_accepts_rtadv(ndi) || !ip6_forwarding)
147 1.12 itojun goto freeit;
148 1.2 itojun
149 1.2 itojun /* Sanity checks */
150 1.2 itojun if (ip6->ip6_hlim != 255) {
151 1.107 ozaki nd6log(LOG_ERR, "invalid hlim (%d) from %s to %s on %s\n",
152 1.20 itojun ip6->ip6_hlim, ip6_sprintf(&ip6->ip6_src),
153 1.107 ozaki ip6_sprintf(&ip6->ip6_dst), if_name(ifp));
154 1.20 itojun goto bad;
155 1.2 itojun }
156 1.2 itojun
157 1.2 itojun /*
158 1.2 itojun * Don't update the neighbor cache, if src = ::.
159 1.2 itojun * This indicates that the src has no IP address assigned yet.
160 1.2 itojun */
161 1.2 itojun if (IN6_IS_ADDR_UNSPECIFIED(&saddr6))
162 1.12 itojun goto freeit;
163 1.12 itojun
164 1.12 itojun IP6_EXTHDR_GET(nd_rs, struct nd_router_solicit *, m, off, icmp6len);
165 1.12 itojun if (nd_rs == NULL) {
166 1.75 thorpej ICMP6_STATINC(ICMP6_STAT_TOOSHORT);
167 1.2 itojun return;
168 1.12 itojun }
169 1.2 itojun
170 1.2 itojun icmp6len -= sizeof(*nd_rs);
171 1.2 itojun nd6_option_init(nd_rs + 1, icmp6len, &ndopts);
172 1.2 itojun if (nd6_options(&ndopts) < 0) {
173 1.107 ozaki nd6log(LOG_INFO, "invalid ND option, ignored\n");
174 1.20 itojun /* nd6_options have incremented stats */
175 1.12 itojun goto freeit;
176 1.2 itojun }
177 1.2 itojun
178 1.2 itojun if (ndopts.nd_opts_src_lladdr) {
179 1.2 itojun lladdr = (char *)(ndopts.nd_opts_src_lladdr + 1);
180 1.2 itojun lladdrlen = ndopts.nd_opts_src_lladdr->nd_opt_len << 3;
181 1.2 itojun }
182 1.2 itojun
183 1.2 itojun if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) {
184 1.107 ozaki nd6log(LOG_INFO, "lladdrlen mismatch for %s "
185 1.2 itojun "(if %d, RS packet %d)\n",
186 1.107 ozaki ip6_sprintf(&saddr6), ifp->if_addrlen, lladdrlen - 2);
187 1.20 itojun goto bad;
188 1.2 itojun }
189 1.2 itojun
190 1.6 itojun nd6_cache_lladdr(ifp, &saddr6, lladdr, lladdrlen, ND_ROUTER_SOLICIT, 0);
191 1.12 itojun
192 1.12 itojun freeit:
193 1.12 itojun m_freem(m);
194 1.20 itojun return;
195 1.20 itojun
196 1.20 itojun bad:
197 1.75 thorpej ICMP6_STATINC(ICMP6_STAT_BADRS);
198 1.20 itojun m_freem(m);
199 1.2 itojun }
200 1.2 itojun
201 1.2 itojun /*
202 1.2 itojun * Receive Router Advertisement Message.
203 1.2 itojun *
204 1.2 itojun * Based on RFC 2461
205 1.2 itojun * TODO: on-link bit on prefix information
206 1.2 itojun * TODO: ND_RA_FLAG_{OTHER,MANAGED} processing
207 1.2 itojun */
208 1.2 itojun void
209 1.64 christos nd6_ra_input(struct mbuf *m, int off, int icmp6len)
210 1.2 itojun {
211 1.2 itojun struct ifnet *ifp = m->m_pkthdr.rcvif;
212 1.29 itojun struct nd_ifinfo *ndi = ND_IFINFO(ifp);
213 1.2 itojun struct ip6_hdr *ip6 = mtod(m, struct ip6_hdr *);
214 1.12 itojun struct nd_router_advert *nd_ra;
215 1.2 itojun struct in6_addr saddr6 = ip6->ip6_src;
216 1.2 itojun #if 0
217 1.2 itojun struct in6_addr daddr6 = ip6->ip6_dst;
218 1.12 itojun int flags; /* = nd_ra->nd_ra_flags_reserved; */
219 1.2 itojun int is_managed = ((flags & ND_RA_FLAG_MANAGED) != 0);
220 1.2 itojun int is_other = ((flags & ND_RA_FLAG_OTHER) != 0);
221 1.2 itojun #endif
222 1.56 rpaulo int mcast = 0;
223 1.2 itojun union nd_opts ndopts;
224 1.2 itojun struct nd_defrouter *dr;
225 1.2 itojun
226 1.32 itojun /*
227 1.81 spz * We only accept RAs when
228 1.81 spz * the system-wide variable allows the acceptance, and the
229 1.33 itojun * per-interface variable allows RAs on the receiving interface.
230 1.32 itojun */
231 1.80 dyoung if (!nd6_accepts_rtadv(ndi))
232 1.32 itojun goto freeit;
233 1.2 itojun
234 1.2 itojun if (ip6->ip6_hlim != 255) {
235 1.107 ozaki nd6log(LOG_ERR, "invalid hlim (%d) from %s to %s on %s\n",
236 1.20 itojun ip6->ip6_hlim, ip6_sprintf(&ip6->ip6_src),
237 1.107 ozaki ip6_sprintf(&ip6->ip6_dst), if_name(ifp));
238 1.20 itojun goto bad;
239 1.2 itojun }
240 1.2 itojun
241 1.2 itojun if (!IN6_IS_ADDR_LINKLOCAL(&saddr6)) {
242 1.107 ozaki nd6log(LOG_ERR, "src %s is not link-local\n",
243 1.107 ozaki ip6_sprintf(&saddr6));
244 1.20 itojun goto bad;
245 1.12 itojun }
246 1.12 itojun
247 1.12 itojun IP6_EXTHDR_GET(nd_ra, struct nd_router_advert *, m, off, icmp6len);
248 1.12 itojun if (nd_ra == NULL) {
249 1.75 thorpej ICMP6_STATINC(ICMP6_STAT_TOOSHORT);
250 1.2 itojun return;
251 1.2 itojun }
252 1.2 itojun
253 1.2 itojun icmp6len -= sizeof(*nd_ra);
254 1.2 itojun nd6_option_init(nd_ra + 1, icmp6len, &ndopts);
255 1.2 itojun if (nd6_options(&ndopts) < 0) {
256 1.107 ozaki nd6log(LOG_INFO, "invalid ND option, ignored\n");
257 1.20 itojun /* nd6_options have incremented stats */
258 1.12 itojun goto freeit;
259 1.2 itojun }
260 1.2 itojun
261 1.2 itojun {
262 1.52 christos struct nd_defrouter drtr;
263 1.2 itojun u_int32_t advreachable = nd_ra->nd_ra_reachable;
264 1.2 itojun
265 1.56 rpaulo /* remember if this is a multicasted advertisement */
266 1.56 rpaulo if (IN6_IS_ADDR_MULTICAST(&ip6->ip6_dst))
267 1.56 rpaulo mcast = 1;
268 1.56 rpaulo
269 1.56 rpaulo memset(&drtr, 0, sizeof(drtr));
270 1.52 christos drtr.rtaddr = saddr6;
271 1.52 christos drtr.flags = nd_ra->nd_ra_flags_reserved;
272 1.58 rpaulo drtr.rtlifetime = ntohs(nd_ra->nd_ra_router_lifetime);
273 1.102 ozaki drtr.expire = time_uptime + drtr.rtlifetime;
274 1.52 christos drtr.ifp = ifp;
275 1.2 itojun /* unspecified or not? (RFC 2461 6.3.4) */
276 1.2 itojun if (advreachable) {
277 1.2 itojun NTOHL(advreachable);
278 1.2 itojun if (advreachable <= MAX_REACHABLE_TIME &&
279 1.2 itojun ndi->basereachable != advreachable) {
280 1.2 itojun ndi->basereachable = advreachable;
281 1.2 itojun ndi->reachable = ND_COMPUTE_RTIME(ndi->basereachable);
282 1.2 itojun ndi->recalctm = nd6_recalc_reachtm_interval; /* reset */
283 1.2 itojun }
284 1.2 itojun }
285 1.2 itojun if (nd_ra->nd_ra_retransmit)
286 1.2 itojun ndi->retrans = ntohl(nd_ra->nd_ra_retransmit);
287 1.99 roy if (nd_ra->nd_ra_curhoplimit) {
288 1.99 roy if (ndi->chlim < nd_ra->nd_ra_curhoplimit)
289 1.99 roy ndi->chlim = nd_ra->nd_ra_curhoplimit;
290 1.99 roy else if (ndi->chlim != nd_ra->nd_ra_curhoplimit)
291 1.99 roy log(LOG_ERR, "nd_ra_input: lower CurHopLimit sent from "
292 1.99 roy "%s on %s (current=%d, received=%d), ignored\n",
293 1.99 roy ip6_sprintf(&ip6->ip6_src),
294 1.99 roy if_name(ifp), ndi->chlim, nd_ra->nd_ra_curhoplimit);
295 1.99 roy }
296 1.52 christos dr = defrtrlist_update(&drtr);
297 1.2 itojun }
298 1.2 itojun
299 1.2 itojun /*
300 1.2 itojun * prefix
301 1.2 itojun */
302 1.2 itojun if (ndopts.nd_opts_pi) {
303 1.2 itojun struct nd_opt_hdr *pt;
304 1.32 itojun struct nd_opt_prefix_info *pi = NULL;
305 1.94 matt struct nd_prefixctl prc;
306 1.2 itojun
307 1.2 itojun for (pt = (struct nd_opt_hdr *)ndopts.nd_opts_pi;
308 1.2 itojun pt <= (struct nd_opt_hdr *)ndopts.nd_opts_pi_end;
309 1.63 christos pt = (struct nd_opt_hdr *)((char *)pt +
310 1.2 itojun (pt->nd_opt_len << 3))) {
311 1.2 itojun if (pt->nd_opt_type != ND_OPT_PREFIX_INFORMATION)
312 1.2 itojun continue;
313 1.2 itojun pi = (struct nd_opt_prefix_info *)pt;
314 1.2 itojun
315 1.2 itojun if (pi->nd_opt_pi_len != 4) {
316 1.107 ozaki nd6log(LOG_INFO, "invalid option "
317 1.22 itojun "len %d for prefix information option, "
318 1.107 ozaki "ignored\n", pi->nd_opt_pi_len);
319 1.2 itojun continue;
320 1.2 itojun }
321 1.2 itojun
322 1.2 itojun if (128 < pi->nd_opt_pi_prefix_len) {
323 1.107 ozaki nd6log(LOG_INFO, "invalid prefix "
324 1.22 itojun "len %d for prefix information option, "
325 1.107 ozaki "ignored\n", pi->nd_opt_pi_prefix_len);
326 1.2 itojun continue;
327 1.2 itojun }
328 1.2 itojun
329 1.2 itojun if (IN6_IS_ADDR_MULTICAST(&pi->nd_opt_pi_prefix)
330 1.2 itojun || IN6_IS_ADDR_LINKLOCAL(&pi->nd_opt_pi_prefix)) {
331 1.107 ozaki nd6log(LOG_INFO,
332 1.107 ozaki "invalid prefix %s, ignored\n",
333 1.107 ozaki ip6_sprintf(&pi->nd_opt_pi_prefix));
334 1.2 itojun continue;
335 1.2 itojun }
336 1.2 itojun
337 1.94 matt memset(&prc, 0, sizeof(prc));
338 1.94 matt sockaddr_in6_init(&prc.ndprc_prefix,
339 1.69 dyoung &pi->nd_opt_pi_prefix, 0, 0, 0);
340 1.94 matt prc.ndprc_ifp = (struct ifnet *)m->m_pkthdr.rcvif;
341 1.2 itojun
342 1.94 matt prc.ndprc_raf_onlink = (pi->nd_opt_pi_flags_reserved &
343 1.56 rpaulo ND_OPT_PI_FLAG_ONLINK) ? 1 : 0;
344 1.94 matt prc.ndprc_raf_auto = (pi->nd_opt_pi_flags_reserved &
345 1.56 rpaulo ND_OPT_PI_FLAG_AUTO) ? 1 : 0;
346 1.94 matt prc.ndprc_plen = pi->nd_opt_pi_prefix_len;
347 1.94 matt prc.ndprc_vltime = ntohl(pi->nd_opt_pi_valid_time);
348 1.94 matt prc.ndprc_pltime = ntohl(pi->nd_opt_pi_preferred_time);
349 1.2 itojun
350 1.94 matt (void)prelist_update(&prc, dr, m, mcast);
351 1.2 itojun }
352 1.2 itojun }
353 1.2 itojun
354 1.2 itojun /*
355 1.2 itojun * MTU
356 1.2 itojun */
357 1.2 itojun if (ndopts.nd_opts_mtu && ndopts.nd_opts_mtu->nd_opt_mtu_len == 1) {
358 1.32 itojun u_long mtu;
359 1.30 itojun u_long maxmtu;
360 1.2 itojun
361 1.32 itojun mtu = ntohl(ndopts.nd_opts_mtu->nd_opt_mtu_mtu);
362 1.32 itojun
363 1.2 itojun /* lower bound */
364 1.2 itojun if (mtu < IPV6_MMTU) {
365 1.107 ozaki nd6log(LOG_INFO, "bogus mtu option "
366 1.32 itojun "mtu=%lu sent from %s, ignoring\n",
367 1.107 ozaki mtu, ip6_sprintf(&ip6->ip6_src));
368 1.2 itojun goto skip;
369 1.2 itojun }
370 1.2 itojun
371 1.2 itojun /* upper bound */
372 1.30 itojun maxmtu = (ndi->maxmtu && ndi->maxmtu < ifp->if_mtu)
373 1.30 itojun ? ndi->maxmtu : ifp->if_mtu;
374 1.30 itojun if (mtu <= maxmtu) {
375 1.30 itojun int change = (ndi->linkmtu != mtu);
376 1.30 itojun
377 1.30 itojun ndi->linkmtu = mtu;
378 1.30 itojun if (change) /* in6_maxmtu may change */
379 1.30 itojun in6_setmaxmtu();
380 1.2 itojun } else {
381 1.107 ozaki nd6log(LOG_INFO,
382 1.107 ozaki "bogus mtu mtu=%lu sent from %s; "
383 1.30 itojun "exceeds maxmtu %lu, ignoring\n",
384 1.107 ozaki mtu, ip6_sprintf(&ip6->ip6_src), maxmtu);
385 1.2 itojun }
386 1.2 itojun }
387 1.2 itojun
388 1.2 itojun skip:
389 1.33 itojun
390 1.2 itojun /*
391 1.26 itojun * Source link layer address
392 1.2 itojun */
393 1.2 itojun {
394 1.2 itojun char *lladdr = NULL;
395 1.2 itojun int lladdrlen = 0;
396 1.33 itojun
397 1.2 itojun if (ndopts.nd_opts_src_lladdr) {
398 1.2 itojun lladdr = (char *)(ndopts.nd_opts_src_lladdr + 1);
399 1.2 itojun lladdrlen = ndopts.nd_opts_src_lladdr->nd_opt_len << 3;
400 1.2 itojun }
401 1.2 itojun
402 1.2 itojun if (lladdr && ((ifp->if_addrlen + 2 + 7) & ~7) != lladdrlen) {
403 1.107 ozaki nd6log(LOG_INFO, "lladdrlen mismatch for %s "
404 1.30 itojun "(if %d, RA packet %d)\n", ip6_sprintf(&saddr6),
405 1.107 ozaki ifp->if_addrlen, lladdrlen - 2);
406 1.20 itojun goto bad;
407 1.2 itojun }
408 1.2 itojun
409 1.6 itojun nd6_cache_lladdr(ifp, &saddr6, lladdr, lladdrlen, ND_ROUTER_ADVERT, 0);
410 1.7 itojun
411 1.7 itojun /*
412 1.7 itojun * Installing a link-layer address might change the state of the
413 1.7 itojun * router's neighbor cache, which might also affect our on-link
414 1.7 itojun * detection of adveritsed prefixes.
415 1.7 itojun */
416 1.7 itojun pfxlist_onlink_check();
417 1.2 itojun }
418 1.12 itojun
419 1.20 itojun freeit:
420 1.20 itojun m_freem(m);
421 1.20 itojun return;
422 1.20 itojun
423 1.20 itojun bad:
424 1.75 thorpej ICMP6_STATINC(ICMP6_STAT_BADRA);
425 1.12 itojun m_freem(m);
426 1.2 itojun }
427 1.2 itojun
428 1.2 itojun /*
429 1.45 wiz * default router list processing sub routines
430 1.2 itojun */
431 1.2 itojun void
432 1.94 matt defrouter_addreq(struct nd_defrouter *newdr)
433 1.2 itojun {
434 1.76 dyoung union {
435 1.76 dyoung struct sockaddr_in6 sin6;
436 1.76 dyoung struct sockaddr sa;
437 1.76 dyoung } def, mask, gate;
438 1.2 itojun int s;
439 1.32 itojun int error;
440 1.2 itojun
441 1.56 rpaulo memset(&def, 0, sizeof(def));
442 1.56 rpaulo memset(&mask, 0, sizeof(mask));
443 1.56 rpaulo memset(&gate, 0,sizeof(gate)); /* for safety */
444 1.2 itojun
445 1.76 dyoung def.sin6.sin6_len = mask.sin6.sin6_len = gate.sin6.sin6_len =
446 1.32 itojun sizeof(struct sockaddr_in6);
447 1.76 dyoung def.sin6.sin6_family = mask.sin6.sin6_family = gate.sin6.sin6_family = AF_INET6;
448 1.94 matt gate.sin6.sin6_addr = newdr->rtaddr;
449 1.32 itojun #ifndef SCOPEDROUTING
450 1.76 dyoung gate.sin6.sin6_scope_id = 0; /* XXX */
451 1.32 itojun #endif
452 1.2 itojun
453 1.4 itojun s = splsoftnet();
454 1.101 ozaki error = rtrequest_newmsg(RTM_ADD, &def.sa, &gate.sa, &mask.sa,
455 1.101 ozaki RTF_GATEWAY);
456 1.101 ozaki if (error == 0) {
457 1.81 spz nd6_numroutes++;
458 1.101 ozaki newdr->installed = 1;
459 1.32 itojun }
460 1.2 itojun splx(s);
461 1.2 itojun return;
462 1.2 itojun }
463 1.2 itojun
464 1.2 itojun struct nd_defrouter *
465 1.66 dyoung defrouter_lookup(const struct in6_addr *addr, struct ifnet *ifp)
466 1.2 itojun {
467 1.2 itojun struct nd_defrouter *dr;
468 1.2 itojun
469 1.66 dyoung TAILQ_FOREACH(dr, &nd_defrouter, dr_entry) {
470 1.66 dyoung if (dr->ifp == ifp && IN6_ARE_ADDR_EQUAL(addr, &dr->rtaddr))
471 1.66 dyoung break;
472 1.7 itojun }
473 1.2 itojun
474 1.66 dyoung return dr; /* search failed */
475 1.2 itojun }
476 1.2 itojun
477 1.2 itojun void
478 1.96 martin defrtrlist_del(struct nd_defrouter *dr, struct in6_ifextra *ext)
479 1.2 itojun {
480 1.2 itojun struct nd_defrouter *deldr = NULL;
481 1.2 itojun struct nd_prefix *pr;
482 1.96 martin struct nd_ifinfo *ndi;
483 1.96 martin
484 1.96 martin if (ext == NULL)
485 1.96 martin ext = dr->ifp->if_afdata[AF_INET6];
486 1.96 martin
487 1.96 martin /* detach already in progress, can not do anything */
488 1.96 martin if (ext == NULL)
489 1.96 martin return;
490 1.96 martin
491 1.96 martin ndi = ext->nd_ifinfo;
492 1.2 itojun
493 1.2 itojun /*
494 1.2 itojun * Flush all the routing table entries that use the router
495 1.2 itojun * as a next hop.
496 1.2 itojun */
497 1.79 tonnerre /* XXX: better condition? */
498 1.80 dyoung if (!ip6_forwarding && nd6_accepts_rtadv(ndi))
499 1.2 itojun rt6_flush(&dr->rtaddr, dr->ifp);
500 1.32 itojun
501 1.32 itojun if (dr->installed) {
502 1.32 itojun deldr = dr;
503 1.32 itojun defrouter_delreq(dr);
504 1.2 itojun }
505 1.7 itojun TAILQ_REMOVE(&nd_defrouter, dr, dr_entry);
506 1.2 itojun
507 1.2 itojun /*
508 1.2 itojun * Also delete all the pointers to the router in each prefix lists.
509 1.2 itojun */
510 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
511 1.2 itojun struct nd_pfxrouter *pfxrtr;
512 1.2 itojun if ((pfxrtr = pfxrtr_lookup(pr, dr)) != NULL)
513 1.2 itojun pfxrtr_del(pfxrtr);
514 1.2 itojun }
515 1.2 itojun pfxlist_onlink_check();
516 1.2 itojun
517 1.2 itojun /*
518 1.7 itojun * If the router is the primary one, choose a new one.
519 1.7 itojun * Note that defrouter_select() will remove the current gateway
520 1.7 itojun * from the routing table.
521 1.2 itojun */
522 1.2 itojun if (deldr)
523 1.7 itojun defrouter_select();
524 1.7 itojun
525 1.83 christos ext->ndefrouters--;
526 1.83 christos if (ext->ndefrouters < 0) {
527 1.83 christos log(LOG_WARNING, "defrtrlist_del: negative count on %s\n",
528 1.83 christos dr->ifp->if_xname);
529 1.83 christos }
530 1.83 christos
531 1.2 itojun free(dr, M_IP6NDP);
532 1.2 itojun }
533 1.2 itojun
534 1.7 itojun /*
535 1.32 itojun * Remove the default route for a given router.
536 1.32 itojun * This is just a subroutine function for defrouter_select(), and should
537 1.32 itojun * not be called from anywhere else.
538 1.32 itojun */
539 1.32 itojun static void
540 1.64 christos defrouter_delreq(struct nd_defrouter *dr)
541 1.32 itojun {
542 1.76 dyoung union {
543 1.76 dyoung struct sockaddr_in6 sin6;
544 1.76 dyoung struct sockaddr sa;
545 1.76 dyoung } def, mask, gw;
546 1.101 ozaki int error;
547 1.32 itojun
548 1.35 itojun #ifdef DIAGNOSTIC
549 1.56 rpaulo if (dr == NULL)
550 1.35 itojun panic("dr == NULL in defrouter_delreq");
551 1.35 itojun #endif
552 1.35 itojun
553 1.76 dyoung memset(&def, 0, sizeof(def));
554 1.76 dyoung memset(&mask, 0, sizeof(mask));
555 1.76 dyoung memset(&gw, 0, sizeof(gw)); /* for safety */
556 1.32 itojun
557 1.76 dyoung def.sin6.sin6_len = mask.sin6.sin6_len = gw.sin6.sin6_len =
558 1.32 itojun sizeof(struct sockaddr_in6);
559 1.76 dyoung def.sin6.sin6_family = mask.sin6.sin6_family = gw.sin6.sin6_family = AF_INET6;
560 1.76 dyoung gw.sin6.sin6_addr = dr->rtaddr;
561 1.32 itojun #ifndef SCOPEDROUTING
562 1.76 dyoung gw.sin6.sin6_scope_id = 0; /* XXX */
563 1.32 itojun #endif
564 1.32 itojun
565 1.101 ozaki error = rtrequest_newmsg(RTM_DELETE, &def.sa, &gw.sa, &mask.sa,
566 1.101 ozaki RTF_GATEWAY);
567 1.101 ozaki if (error == 0)
568 1.100 ozaki nd6_numroutes--;
569 1.32 itojun
570 1.35 itojun dr->installed = 0;
571 1.32 itojun }
572 1.32 itojun
573 1.32 itojun /*
574 1.32 itojun * remove all default routes from default router list
575 1.32 itojun */
576 1.32 itojun void
577 1.73 matt defrouter_reset(void)
578 1.32 itojun {
579 1.32 itojun struct nd_defrouter *dr;
580 1.32 itojun
581 1.32 itojun for (dr = TAILQ_FIRST(&nd_defrouter); dr;
582 1.32 itojun dr = TAILQ_NEXT(dr, dr_entry))
583 1.32 itojun defrouter_delreq(dr);
584 1.32 itojun
585 1.32 itojun /*
586 1.32 itojun * XXX should we also nuke any default routers in the kernel, by
587 1.32 itojun * going through them by rtalloc1()?
588 1.32 itojun */
589 1.32 itojun }
590 1.32 itojun
591 1.32 itojun /*
592 1.32 itojun * Default Router Selection according to Section 6.3.6 of RFC 2461 and
593 1.32 itojun * draft-ietf-ipngwg-router-selection:
594 1.32 itojun * 1) Routers that are reachable or probably reachable should be preferred.
595 1.32 itojun * If we have more than one (probably) reachable router, prefer ones
596 1.32 itojun * with the highest router preference.
597 1.7 itojun * 2) When no routers on the list are known to be reachable or
598 1.7 itojun * probably reachable, routers SHOULD be selected in a round-robin
599 1.32 itojun * fashion, regardless of router preference values.
600 1.7 itojun * 3) If the Default Router List is empty, assume that all
601 1.7 itojun * destinations are on-link.
602 1.32 itojun *
603 1.32 itojun * We assume nd_defrouter is sorted by router preference value.
604 1.32 itojun * Since the code below covers both with and without router preference cases,
605 1.32 itojun * we do not need to classify the cases by ifdef.
606 1.32 itojun *
607 1.32 itojun * At this moment, we do not try to install more than one default router,
608 1.32 itojun * even when the multipath routing is available, because we're not sure about
609 1.32 itojun * the benefits for stub hosts comparing to the risk of making the code
610 1.32 itojun * complicated and the possibility of introducing bugs.
611 1.7 itojun */
612 1.7 itojun void
613 1.73 matt defrouter_select(void)
614 1.7 itojun {
615 1.79 tonnerre struct nd_ifinfo *ndi;
616 1.7 itojun int s = splsoftnet();
617 1.32 itojun struct nd_defrouter *dr, *selected_dr = NULL, *installed_dr = NULL;
618 1.7 itojun
619 1.7 itojun /*
620 1.32 itojun * This function should be called only when acting as an autoconfigured
621 1.32 itojun * host. Although the remaining part of this function is not effective
622 1.32 itojun * if the node is not an autoconfigured host, we explicitly exclude
623 1.32 itojun * such cases here for safety.
624 1.7 itojun */
625 1.79 tonnerre if (ip6_forwarding) {
626 1.107 ozaki nd6log(LOG_WARNING, "called unexpectedly (forwarding=%d, "
627 1.107 ozaki "accept_rtadv=%d)\n", ip6_forwarding, ip6_accept_rtadv);
628 1.32 itojun splx(s);
629 1.32 itojun return;
630 1.7 itojun }
631 1.7 itojun
632 1.32 itojun /*
633 1.32 itojun * Let's handle easy case (3) first:
634 1.49 itojun * If default router list is empty, there's nothing to be done.
635 1.32 itojun */
636 1.32 itojun if (!TAILQ_FIRST(&nd_defrouter)) {
637 1.32 itojun splx(s);
638 1.32 itojun return;
639 1.32 itojun }
640 1.32 itojun
641 1.32 itojun /*
642 1.32 itojun * Search for a (probably) reachable router from the list.
643 1.32 itojun * We just pick up the first reachable one (if any), assuming that
644 1.32 itojun * the ordering rule of the list described in defrtrlist_update().
645 1.32 itojun */
646 1.32 itojun for (dr = TAILQ_FIRST(&nd_defrouter); dr;
647 1.32 itojun dr = TAILQ_NEXT(dr, dr_entry)) {
648 1.79 tonnerre ndi = ND_IFINFO(dr->ifp);
649 1.80 dyoung if (nd6_accepts_rtadv(ndi))
650 1.79 tonnerre continue;
651 1.79 tonnerre
652 1.56 rpaulo if (selected_dr == NULL &&
653 1.101 ozaki nd6_is_llinfo_probreach(dr))
654 1.32 itojun selected_dr = dr;
655 1.32 itojun
656 1.32 itojun if (dr->installed && !installed_dr)
657 1.32 itojun installed_dr = dr;
658 1.32 itojun else if (dr->installed && installed_dr) {
659 1.32 itojun /* this should not happen. warn for diagnosis. */
660 1.32 itojun log(LOG_ERR, "defrouter_select: more than one router"
661 1.32 itojun " is installed\n");
662 1.32 itojun }
663 1.32 itojun }
664 1.32 itojun /*
665 1.32 itojun * If none of the default routers was found to be reachable,
666 1.32 itojun * round-robin the list regardless of preference.
667 1.32 itojun * Otherwise, if we have an installed router, check if the selected
668 1.32 itojun * (reachable) router should really be preferred to the installed one.
669 1.32 itojun * We only prefer the new router when the old one is not reachable
670 1.32 itojun * or when the new one has a really higher preference value.
671 1.32 itojun */
672 1.56 rpaulo if (selected_dr == NULL) {
673 1.56 rpaulo if (installed_dr == NULL || !TAILQ_NEXT(installed_dr, dr_entry))
674 1.32 itojun selected_dr = TAILQ_FIRST(&nd_defrouter);
675 1.32 itojun else
676 1.32 itojun selected_dr = TAILQ_NEXT(installed_dr, dr_entry);
677 1.32 itojun } else if (installed_dr &&
678 1.101 ozaki nd6_is_llinfo_probreach(installed_dr) &&
679 1.32 itojun rtpref(selected_dr) <= rtpref(installed_dr)) {
680 1.32 itojun selected_dr = installed_dr;
681 1.32 itojun }
682 1.32 itojun
683 1.32 itojun /*
684 1.32 itojun * If the selected router is different than the installed one,
685 1.32 itojun * remove the installed router and install the selected one.
686 1.32 itojun * Note that the selected router is never NULL here.
687 1.32 itojun */
688 1.32 itojun if (installed_dr != selected_dr) {
689 1.32 itojun if (installed_dr)
690 1.32 itojun defrouter_delreq(installed_dr);
691 1.32 itojun defrouter_addreq(selected_dr);
692 1.7 itojun }
693 1.7 itojun
694 1.7 itojun splx(s);
695 1.7 itojun return;
696 1.7 itojun }
697 1.7 itojun
698 1.32 itojun /*
699 1.32 itojun * for default router selection
700 1.32 itojun * regards router-preference field as a 2-bit signed integer
701 1.32 itojun */
702 1.32 itojun static int
703 1.32 itojun rtpref(struct nd_defrouter *dr)
704 1.32 itojun {
705 1.32 itojun switch (dr->flags & ND_RA_FLAG_RTPREF_MASK) {
706 1.32 itojun case ND_RA_FLAG_RTPREF_HIGH:
707 1.56 rpaulo return (RTPREF_HIGH);
708 1.32 itojun case ND_RA_FLAG_RTPREF_MEDIUM:
709 1.58 rpaulo case ND_RA_FLAG_RTPREF_RSV:
710 1.56 rpaulo return (RTPREF_MEDIUM);
711 1.32 itojun case ND_RA_FLAG_RTPREF_LOW:
712 1.56 rpaulo return (RTPREF_LOW);
713 1.32 itojun default:
714 1.32 itojun /*
715 1.32 itojun * This case should never happen. If it did, it would mean a
716 1.32 itojun * serious bug of kernel internal. We thus always bark here.
717 1.32 itojun * Or, can we even panic?
718 1.32 itojun */
719 1.56 rpaulo log(LOG_ERR, "rtpref: impossible RA flag %x\n", dr->flags);
720 1.56 rpaulo return (RTPREF_INVALID);
721 1.32 itojun }
722 1.32 itojun /* NOTREACHED */
723 1.32 itojun }
724 1.32 itojun
725 1.2 itojun static struct nd_defrouter *
726 1.94 matt defrtrlist_update(struct nd_defrouter *newdr)
727 1.2 itojun {
728 1.2 itojun struct nd_defrouter *dr, *n;
729 1.94 matt struct in6_ifextra *ext = newdr->ifp->if_afdata[AF_INET6];
730 1.4 itojun int s = splsoftnet();
731 1.2 itojun
732 1.94 matt if ((dr = defrouter_lookup(&newdr->rtaddr, newdr->ifp)) != NULL) {
733 1.2 itojun /* entry exists */
734 1.94 matt if (newdr->rtlifetime == 0) {
735 1.96 martin defrtrlist_del(dr, ext);
736 1.2 itojun dr = NULL;
737 1.2 itojun } else {
738 1.32 itojun int oldpref = rtpref(dr);
739 1.32 itojun
740 1.2 itojun /* override */
741 1.94 matt dr->flags = newdr->flags; /* xxx flag check */
742 1.94 matt dr->rtlifetime = newdr->rtlifetime;
743 1.94 matt dr->expire = newdr->expire;
744 1.32 itojun
745 1.32 itojun /*
746 1.32 itojun * If the preference does not change, there's no need
747 1.32 itojun * to sort the entries.
748 1.32 itojun */
749 1.94 matt if (rtpref(newdr) == oldpref) {
750 1.32 itojun splx(s);
751 1.36 itojun return (dr);
752 1.32 itojun }
753 1.32 itojun
754 1.32 itojun /*
755 1.32 itojun * preferred router may be changed, so relocate
756 1.32 itojun * this router.
757 1.32 itojun * XXX: calling TAILQ_REMOVE directly is a bad manner.
758 1.32 itojun * However, since defrtrlist_del() has many side
759 1.32 itojun * effects, we intentionally do so here.
760 1.32 itojun * defrouter_select() below will handle routing
761 1.32 itojun * changes later.
762 1.32 itojun */
763 1.32 itojun TAILQ_REMOVE(&nd_defrouter, dr, dr_entry);
764 1.32 itojun n = dr;
765 1.32 itojun goto insert;
766 1.2 itojun }
767 1.2 itojun splx(s);
768 1.36 itojun return (dr);
769 1.2 itojun }
770 1.2 itojun
771 1.83 christos if (ip6_maxifdefrouters >= 0 &&
772 1.83 christos ext->ndefrouters >= ip6_maxifdefrouters) {
773 1.83 christos splx(s);
774 1.83 christos return (NULL);
775 1.83 christos }
776 1.83 christos
777 1.2 itojun /* entry does not exist */
778 1.94 matt if (newdr->rtlifetime == 0) {
779 1.2 itojun splx(s);
780 1.36 itojun return (NULL);
781 1.2 itojun }
782 1.2 itojun
783 1.81 spz if (ip6_rtadv_maxroutes <= nd6_numroutes) {
784 1.81 spz ICMP6_STATINC(ICMP6_STAT_DROPPED_RAROUTE);
785 1.81 spz splx(s);
786 1.81 spz return (NULL);
787 1.81 spz }
788 1.81 spz
789 1.2 itojun n = (struct nd_defrouter *)malloc(sizeof(*n), M_IP6NDP, M_NOWAIT);
790 1.2 itojun if (n == NULL) {
791 1.2 itojun splx(s);
792 1.36 itojun return (NULL);
793 1.2 itojun }
794 1.78 cegger memset(n, 0, sizeof(*n));
795 1.94 matt *n = *newdr;
796 1.7 itojun
797 1.32 itojun insert:
798 1.7 itojun /*
799 1.32 itojun * Insert the new router in the Default Router List;
800 1.32 itojun * The Default Router List should be in the descending order
801 1.32 itojun * of router-preferece. Routers with the same preference are
802 1.32 itojun * sorted in the arriving time order.
803 1.7 itojun */
804 1.32 itojun
805 1.32 itojun /* insert at the end of the group */
806 1.32 itojun for (dr = TAILQ_FIRST(&nd_defrouter); dr;
807 1.32 itojun dr = TAILQ_NEXT(dr, dr_entry)) {
808 1.32 itojun if (rtpref(n) > rtpref(dr))
809 1.32 itojun break;
810 1.32 itojun }
811 1.32 itojun if (dr)
812 1.32 itojun TAILQ_INSERT_BEFORE(dr, n, dr_entry);
813 1.32 itojun else
814 1.32 itojun TAILQ_INSERT_TAIL(&nd_defrouter, n, dr_entry);
815 1.32 itojun
816 1.32 itojun defrouter_select();
817 1.32 itojun
818 1.83 christos ext->ndefrouters++;
819 1.83 christos
820 1.2 itojun splx(s);
821 1.33 itojun
822 1.36 itojun return (n);
823 1.2 itojun }
824 1.2 itojun
825 1.2 itojun static struct nd_pfxrouter *
826 1.64 christos pfxrtr_lookup(struct nd_prefix *pr, struct nd_defrouter *dr)
827 1.2 itojun {
828 1.2 itojun struct nd_pfxrouter *search;
829 1.33 itojun
830 1.62 dyoung LIST_FOREACH(search, &pr->ndpr_advrtrs, pfr_entry) {
831 1.2 itojun if (search->router == dr)
832 1.2 itojun break;
833 1.2 itojun }
834 1.2 itojun
835 1.36 itojun return (search);
836 1.2 itojun }
837 1.2 itojun
838 1.2 itojun static void
839 1.64 christos pfxrtr_add(struct nd_prefix *pr, struct nd_defrouter *dr)
840 1.2 itojun {
841 1.94 matt struct nd_pfxrouter *newpfr;
842 1.2 itojun
843 1.94 matt newpfr = malloc(sizeof(*newpfr), M_IP6NDP, M_NOWAIT|M_ZERO);
844 1.94 matt if (newpfr == NULL)
845 1.2 itojun return;
846 1.94 matt newpfr->router = dr;
847 1.2 itojun
848 1.94 matt LIST_INSERT_HEAD(&pr->ndpr_advrtrs, newpfr, pfr_entry);
849 1.2 itojun
850 1.2 itojun pfxlist_onlink_check();
851 1.2 itojun }
852 1.2 itojun
853 1.2 itojun static void
854 1.64 christos pfxrtr_del(struct nd_pfxrouter *pfr)
855 1.2 itojun {
856 1.2 itojun LIST_REMOVE(pfr, pfr_entry);
857 1.2 itojun free(pfr, M_IP6NDP);
858 1.2 itojun }
859 1.2 itojun
860 1.32 itojun struct nd_prefix *
861 1.64 christos nd6_prefix_lookup(struct nd_prefixctl *key)
862 1.2 itojun {
863 1.2 itojun struct nd_prefix *search;
864 1.2 itojun
865 1.62 dyoung LIST_FOREACH(search, &nd_prefix, ndpr_entry) {
866 1.94 matt if (key->ndprc_ifp == search->ndpr_ifp &&
867 1.94 matt key->ndprc_plen == search->ndpr_plen &&
868 1.94 matt in6_are_prefix_equal(&key->ndprc_prefix.sin6_addr,
869 1.94 matt &search->ndpr_prefix.sin6_addr, key->ndprc_plen)) {
870 1.2 itojun break;
871 1.2 itojun }
872 1.2 itojun }
873 1.2 itojun
874 1.36 itojun return (search);
875 1.2 itojun }
876 1.2 itojun
877 1.83 christos static void
878 1.83 christos purge_detached(struct ifnet *ifp)
879 1.83 christos {
880 1.83 christos struct nd_prefix *pr, *pr_next;
881 1.83 christos struct in6_ifaddr *ia;
882 1.93 ozaki struct ifaddr *ifa, *ifa_next;
883 1.83 christos
884 1.83 christos for (pr = nd_prefix.lh_first; pr; pr = pr_next) {
885 1.83 christos pr_next = pr->ndpr_next;
886 1.83 christos
887 1.83 christos /*
888 1.83 christos * This function is called when we need to make more room for
889 1.83 christos * new prefixes rather than keeping old, possibly stale ones.
890 1.83 christos * Detached prefixes would be a good candidate; if all routers
891 1.83 christos * that advertised the prefix expired, the prefix is also
892 1.83 christos * probably stale.
893 1.83 christos */
894 1.83 christos if (pr->ndpr_ifp != ifp ||
895 1.83 christos IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr) ||
896 1.83 christos ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 &&
897 1.83 christos !LIST_EMPTY(&pr->ndpr_advrtrs)))
898 1.83 christos continue;
899 1.83 christos
900 1.93 ozaki IFADDR_FOREACH_SAFE(ifa, ifp, ifa_next) {
901 1.83 christos if (ifa->ifa_addr->sa_family != AF_INET6)
902 1.83 christos continue;
903 1.83 christos ia = (struct in6_ifaddr *)ifa;
904 1.83 christos if ((ia->ia6_flags & IN6_IFF_AUTOCONF) ==
905 1.83 christos IN6_IFF_AUTOCONF && ia->ia6_ndpr == pr) {
906 1.83 christos in6_purgeaddr(ifa);
907 1.83 christos }
908 1.83 christos }
909 1.83 christos if (pr->ndpr_refcnt == 0)
910 1.83 christos prelist_remove(pr);
911 1.83 christos }
912 1.83 christos }
913 1.32 itojun int
914 1.94 matt nd6_prelist_add(struct nd_prefixctl *prc, struct nd_defrouter *dr,
915 1.64 christos struct nd_prefix **newp)
916 1.2 itojun {
917 1.94 matt struct nd_prefix *newpr = NULL;
918 1.2 itojun int i, s;
919 1.56 rpaulo int error;
920 1.94 matt struct in6_ifextra *ext = prc->ndprc_ifp->if_afdata[AF_INET6];
921 1.83 christos
922 1.83 christos if (ip6_maxifprefixes >= 0) {
923 1.83 christos if (ext->nprefixes >= ip6_maxifprefixes / 2)
924 1.94 matt purge_detached(prc->ndprc_ifp);
925 1.83 christos if (ext->nprefixes >= ip6_maxifprefixes)
926 1.83 christos return ENOMEM;
927 1.83 christos }
928 1.2 itojun
929 1.56 rpaulo error = 0;
930 1.94 matt newpr = malloc(sizeof(*newpr), M_IP6NDP, M_NOWAIT|M_ZERO);
931 1.94 matt if (newpr == NULL)
932 1.2 itojun return ENOMEM;
933 1.94 matt newpr->ndpr_ifp = prc->ndprc_ifp;
934 1.94 matt newpr->ndpr_prefix = prc->ndprc_prefix;
935 1.94 matt newpr->ndpr_plen = prc->ndprc_plen;
936 1.94 matt newpr->ndpr_vltime = prc->ndprc_vltime;
937 1.94 matt newpr->ndpr_pltime = prc->ndprc_pltime;
938 1.94 matt newpr->ndpr_flags = prc->ndprc_flags;
939 1.94 matt if ((error = in6_init_prefix_ltimes(newpr)) != 0) {
940 1.94 matt free(newpr, M_IP6NDP);
941 1.56 rpaulo return(error);
942 1.56 rpaulo }
943 1.102 ozaki newpr->ndpr_lastupdate = time_uptime;
944 1.32 itojun if (newp != NULL)
945 1.94 matt *newp = newpr;
946 1.2 itojun
947 1.55 rpaulo /* initialization */
948 1.94 matt LIST_INIT(&newpr->ndpr_advrtrs);
949 1.94 matt in6_prefixlen2mask(&newpr->ndpr_mask, newpr->ndpr_plen);
950 1.2 itojun /* make prefix in the canonical form */
951 1.94 matt for (i = 0; i < 4; i++) {
952 1.94 matt newpr->ndpr_prefix.sin6_addr.s6_addr32[i] &=
953 1.94 matt newpr->ndpr_mask.s6_addr32[i];
954 1.94 matt }
955 1.2 itojun
956 1.4 itojun s = splsoftnet();
957 1.2 itojun /* link ndpr_entry to nd_prefix list */
958 1.94 matt LIST_INSERT_HEAD(&nd_prefix, newpr, ndpr_entry);
959 1.2 itojun splx(s);
960 1.2 itojun
961 1.32 itojun /* ND_OPT_PI_FLAG_ONLINK processing */
962 1.94 matt if (newpr->ndpr_raf_onlink) {
963 1.32 itojun int e;
964 1.32 itojun
965 1.94 matt if ((e = nd6_prefix_onlink(newpr)) != 0) {
966 1.107 ozaki nd6log(LOG_ERR, "failed to make "
967 1.32 itojun "the prefix %s/%d on-link on %s (errno=%d)\n",
968 1.94 matt ip6_sprintf(&prc->ndprc_prefix.sin6_addr),
969 1.107 ozaki prc->ndprc_plen, if_name(prc->ndprc_ifp), e);
970 1.32 itojun /* proceed anyway. XXX: is it correct? */
971 1.32 itojun }
972 1.32 itojun }
973 1.32 itojun
974 1.2 itojun if (dr)
975 1.94 matt pfxrtr_add(newpr, dr);
976 1.2 itojun
977 1.83 christos ext->nprefixes++;
978 1.83 christos
979 1.2 itojun return 0;
980 1.2 itojun }
981 1.2 itojun
982 1.2 itojun void
983 1.64 christos prelist_remove(struct nd_prefix *pr)
984 1.2 itojun {
985 1.2 itojun struct nd_pfxrouter *pfr, *next;
986 1.32 itojun int e, s;
987 1.83 christos struct in6_ifextra *ext = pr->ndpr_ifp->if_afdata[AF_INET6];
988 1.32 itojun
989 1.32 itojun /* make sure to invalidate the prefix until it is really freed. */
990 1.32 itojun pr->ndpr_vltime = 0;
991 1.32 itojun pr->ndpr_pltime = 0;
992 1.32 itojun #if 0
993 1.32 itojun /*
994 1.32 itojun * Though these flags are now meaningless, we'd rather keep the value
995 1.32 itojun * not to confuse users when executing "ndp -p".
996 1.32 itojun */
997 1.32 itojun pr->ndpr_raf_onlink = 0;
998 1.32 itojun pr->ndpr_raf_auto = 0;
999 1.32 itojun #endif
1000 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_ONLINK) != 0 &&
1001 1.32 itojun (e = nd6_prefix_offlink(pr)) != 0) {
1002 1.107 ozaki nd6log(LOG_ERR,
1003 1.107 ozaki "failed to make %s/%d offlink on %s, errno=%d\n",
1004 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1005 1.107 ozaki pr->ndpr_plen, if_name(pr->ndpr_ifp), e);
1006 1.32 itojun /* what should we do? */
1007 1.32 itojun }
1008 1.32 itojun
1009 1.32 itojun if (pr->ndpr_refcnt > 0)
1010 1.32 itojun return; /* notice here? */
1011 1.2 itojun
1012 1.4 itojun s = splsoftnet();
1013 1.2 itojun /* unlink ndpr_entry from nd_prefix list */
1014 1.2 itojun LIST_REMOVE(pr, ndpr_entry);
1015 1.2 itojun
1016 1.2 itojun /* free list of routers that adversed the prefix */
1017 1.62 dyoung for (pfr = LIST_FIRST(&pr->ndpr_advrtrs); pfr != NULL; pfr = next) {
1018 1.62 dyoung next = LIST_NEXT(pfr, pfr_entry);
1019 1.2 itojun
1020 1.2 itojun free(pfr, M_IP6NDP);
1021 1.2 itojun }
1022 1.83 christos
1023 1.86 christos if (ext) {
1024 1.86 christos ext->nprefixes--;
1025 1.86 christos if (ext->nprefixes < 0) {
1026 1.86 christos log(LOG_WARNING, "prelist_remove: negative count on "
1027 1.86 christos "%s\n", pr->ndpr_ifp->if_xname);
1028 1.86 christos }
1029 1.83 christos }
1030 1.21 itojun splx(s);
1031 1.21 itojun
1032 1.2 itojun free(pr, M_IP6NDP);
1033 1.2 itojun
1034 1.2 itojun pfxlist_onlink_check();
1035 1.2 itojun }
1036 1.2 itojun
1037 1.56 rpaulo static int
1038 1.94 matt prelist_update(struct nd_prefixctl *newprc,
1039 1.64 christos struct nd_defrouter *dr, /* may be NULL */
1040 1.64 christos struct mbuf *m,
1041 1.64 christos int mcast)
1042 1.2 itojun {
1043 1.32 itojun struct in6_ifaddr *ia6 = NULL, *ia6_match = NULL;
1044 1.32 itojun struct ifaddr *ifa;
1045 1.94 matt struct ifnet *ifp = newprc->ndprc_ifp;
1046 1.2 itojun struct nd_prefix *pr;
1047 1.4 itojun int s = splsoftnet();
1048 1.2 itojun int error = 0;
1049 1.2 itojun int auth;
1050 1.32 itojun struct in6_addrlifetime lt6_tmp;
1051 1.2 itojun
1052 1.7 itojun auth = 0;
1053 1.2 itojun if (m) {
1054 1.2 itojun /*
1055 1.2 itojun * Authenticity for NA consists authentication for
1056 1.2 itojun * both IP header and IP datagrams, doesn't it ?
1057 1.2 itojun */
1058 1.7 itojun #if defined(M_AUTHIPHDR) && defined(M_AUTHIPDGM)
1059 1.2 itojun auth = (m->m_flags & M_AUTHIPHDR
1060 1.2 itojun && m->m_flags & M_AUTHIPDGM) ? 1 : 0;
1061 1.7 itojun #endif
1062 1.7 itojun }
1063 1.2 itojun
1064 1.94 matt if ((pr = nd6_prefix_lookup(newprc)) != NULL) {
1065 1.32 itojun /*
1066 1.94 matt * nd6_prefix_lookup() ensures that pr and newprc have the same
1067 1.32 itojun * prefix on a same interface.
1068 1.32 itojun */
1069 1.32 itojun
1070 1.32 itojun /*
1071 1.32 itojun * Update prefix information. Note that the on-link (L) bit
1072 1.32 itojun * and the autonomous (A) bit should NOT be changed from 1
1073 1.32 itojun * to 0.
1074 1.32 itojun */
1075 1.94 matt if (newprc->ndprc_raf_onlink == 1)
1076 1.32 itojun pr->ndpr_raf_onlink = 1;
1077 1.94 matt if (newprc->ndprc_raf_auto == 1)
1078 1.32 itojun pr->ndpr_raf_auto = 1;
1079 1.94 matt if (newprc->ndprc_raf_onlink) {
1080 1.94 matt pr->ndpr_vltime = newprc->ndprc_vltime;
1081 1.94 matt pr->ndpr_pltime = newprc->ndprc_pltime;
1082 1.56 rpaulo (void)in6_init_prefix_ltimes(pr); /* XXX error case? */
1083 1.102 ozaki pr->ndpr_lastupdate = time_uptime;
1084 1.32 itojun }
1085 1.32 itojun
1086 1.94 matt if (newprc->ndprc_raf_onlink &&
1087 1.32 itojun (pr->ndpr_stateflags & NDPRF_ONLINK) == 0) {
1088 1.32 itojun int e;
1089 1.32 itojun
1090 1.32 itojun if ((e = nd6_prefix_onlink(pr)) != 0) {
1091 1.107 ozaki nd6log(LOG_ERR,
1092 1.107 ozaki "failed to make "
1093 1.32 itojun "the prefix %s/%d on-link on %s "
1094 1.107 ozaki "(errno=%d)\n",
1095 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1096 1.107 ozaki pr->ndpr_plen, if_name(pr->ndpr_ifp), e);
1097 1.32 itojun /* proceed anyway. XXX: is it correct? */
1098 1.32 itojun }
1099 1.32 itojun }
1100 1.32 itojun
1101 1.32 itojun if (dr && pfxrtr_lookup(pr, dr) == NULL)
1102 1.32 itojun pfxrtr_add(pr, dr);
1103 1.32 itojun } else {
1104 1.32 itojun struct nd_prefix *newpr = NULL;
1105 1.32 itojun
1106 1.94 matt if (newprc->ndprc_vltime == 0)
1107 1.2 itojun goto end;
1108 1.94 matt if (newprc->ndprc_raf_onlink == 0 && newprc->ndprc_raf_auto == 0)
1109 1.32 itojun goto end;
1110 1.32 itojun
1111 1.81 spz if (ip6_rtadv_maxroutes <= nd6_numroutes) {
1112 1.81 spz ICMP6_STATINC(ICMP6_STAT_DROPPED_RAROUTE);
1113 1.81 spz goto end;
1114 1.81 spz }
1115 1.81 spz
1116 1.94 matt error = nd6_prelist_add(newprc, dr, &newpr);
1117 1.32 itojun if (error != 0 || newpr == NULL) {
1118 1.107 ozaki nd6log(LOG_NOTICE,
1119 1.107 ozaki "nd6_prelist_add failed for %s/%d on %s "
1120 1.107 ozaki "errno=%d, returnpr=%p\n",
1121 1.94 matt ip6_sprintf(&newprc->ndprc_prefix.sin6_addr),
1122 1.94 matt newprc->ndprc_plen, if_name(newprc->ndprc_ifp),
1123 1.107 ozaki error, newpr);
1124 1.32 itojun goto end; /* we should just give up in this case. */
1125 1.2 itojun }
1126 1.2 itojun
1127 1.2 itojun /*
1128 1.32 itojun * XXX: from the ND point of view, we can ignore a prefix
1129 1.32 itojun * with the on-link bit being zero. However, we need a
1130 1.32 itojun * prefix structure for references from autoconfigured
1131 1.32 itojun * addresses. Thus, we explicitly make sure that the prefix
1132 1.32 itojun * itself expires now.
1133 1.2 itojun */
1134 1.32 itojun if (newpr->ndpr_raf_onlink == 0) {
1135 1.32 itojun newpr->ndpr_vltime = 0;
1136 1.32 itojun newpr->ndpr_pltime = 0;
1137 1.32 itojun in6_init_prefix_ltimes(newpr);
1138 1.32 itojun }
1139 1.2 itojun
1140 1.32 itojun pr = newpr;
1141 1.32 itojun }
1142 1.32 itojun
1143 1.32 itojun /*
1144 1.32 itojun * Address autoconfiguration based on Section 5.5.3 of RFC 2462.
1145 1.32 itojun * Note that pr must be non NULL at this point.
1146 1.32 itojun */
1147 1.32 itojun
1148 1.32 itojun /* 5.5.3 (a). Ignore the prefix without the A bit set. */
1149 1.94 matt if (!newprc->ndprc_raf_auto)
1150 1.32 itojun goto end;
1151 1.2 itojun
1152 1.32 itojun /*
1153 1.32 itojun * 5.5.3 (b). the link-local prefix should have been ignored in
1154 1.32 itojun * nd6_ra_input.
1155 1.32 itojun */
1156 1.2 itojun
1157 1.56 rpaulo /* 5.5.3 (c). Consistency check on lifetimes: pltime <= vltime. */
1158 1.94 matt if (newprc->ndprc_pltime > newprc->ndprc_vltime) {
1159 1.56 rpaulo error = EINVAL; /* XXX: won't be used */
1160 1.56 rpaulo goto end;
1161 1.56 rpaulo }
1162 1.2 itojun
1163 1.32 itojun /*
1164 1.56 rpaulo * 5.5.3 (d). If the prefix advertised is not equal to the prefix of
1165 1.56 rpaulo * an address configured by stateless autoconfiguration already in the
1166 1.56 rpaulo * list of addresses associated with the interface, and the Valid
1167 1.56 rpaulo * Lifetime is not 0, form an address. We first check if we have
1168 1.56 rpaulo * a matching prefix.
1169 1.56 rpaulo * Note: we apply a clarification in rfc2462bis-02 here. We only
1170 1.56 rpaulo * consider autoconfigured addresses while RFC2462 simply said
1171 1.56 rpaulo * "address".
1172 1.32 itojun */
1173 1.70 dyoung IFADDR_FOREACH(ifa, ifp) {
1174 1.32 itojun struct in6_ifaddr *ifa6;
1175 1.56 rpaulo u_int32_t remaininglifetime;
1176 1.2 itojun
1177 1.32 itojun if (ifa->ifa_addr->sa_family != AF_INET6)
1178 1.32 itojun continue;
1179 1.2 itojun
1180 1.32 itojun ifa6 = (struct in6_ifaddr *)ifa;
1181 1.2 itojun
1182 1.32 itojun /*
1183 1.56 rpaulo * We only consider autoconfigured addresses as per rfc2462bis.
1184 1.56 rpaulo */
1185 1.56 rpaulo if (!(ifa6->ia6_flags & IN6_IFF_AUTOCONF))
1186 1.56 rpaulo continue;
1187 1.56 rpaulo
1188 1.56 rpaulo /*
1189 1.32 itojun * Spec is not clear here, but I believe we should concentrate
1190 1.32 itojun * on unicast (i.e. not anycast) addresses.
1191 1.32 itojun * XXX: other ia6_flags? detached or duplicated?
1192 1.32 itojun */
1193 1.32 itojun if ((ifa6->ia6_flags & IN6_IFF_ANYCAST) != 0)
1194 1.32 itojun continue;
1195 1.33 itojun
1196 1.56 rpaulo /*
1197 1.56 rpaulo * Ignore the address if it is not associated with a prefix
1198 1.56 rpaulo * or is associated with a prefix that is different from this
1199 1.56 rpaulo * one. (pr is never NULL here)
1200 1.56 rpaulo */
1201 1.56 rpaulo if (ifa6->ia6_ndpr != pr)
1202 1.32 itojun continue;
1203 1.7 itojun
1204 1.32 itojun if (ia6_match == NULL) /* remember the first one */
1205 1.32 itojun ia6_match = ifa6;
1206 1.2 itojun
1207 1.32 itojun /*
1208 1.32 itojun * An already autoconfigured address matched. Now that we
1209 1.32 itojun * are sure there is at least one matched address, we can
1210 1.32 itojun * proceed to 5.5.3. (e): update the lifetimes according to the
1211 1.32 itojun * "two hours" rule and the privacy extension.
1212 1.56 rpaulo * We apply some clarifications in rfc2462bis:
1213 1.56 rpaulo * - use remaininglifetime instead of storedlifetime as a
1214 1.56 rpaulo * variable name
1215 1.56 rpaulo * - remove the dead code in the "two-hour" rule
1216 1.32 itojun */
1217 1.32 itojun #define TWOHOUR (120*60)
1218 1.32 itojun lt6_tmp = ifa6->ia6_lifetime;
1219 1.32 itojun if (lt6_tmp.ia6t_vltime == ND6_INFINITE_LIFETIME)
1220 1.56 rpaulo remaininglifetime = ND6_INFINITE_LIFETIME;
1221 1.102 ozaki else if (time_uptime - ifa6->ia6_updatetime >
1222 1.32 itojun lt6_tmp.ia6t_vltime) {
1223 1.32 itojun /*
1224 1.32 itojun * The case of "invalid" address. We should usually
1225 1.32 itojun * not see this case.
1226 1.32 itojun */
1227 1.56 rpaulo remaininglifetime = 0;
1228 1.32 itojun } else
1229 1.56 rpaulo remaininglifetime = lt6_tmp.ia6t_vltime -
1230 1.102 ozaki (time_uptime - ifa6->ia6_updatetime);
1231 1.56 rpaulo
1232 1.56 rpaulo /* when not updating, keep the current stored lifetime. */
1233 1.56 rpaulo lt6_tmp.ia6t_vltime = remaininglifetime;
1234 1.56 rpaulo
1235 1.94 matt if (TWOHOUR < newprc->ndprc_vltime ||
1236 1.94 matt remaininglifetime < newprc->ndprc_vltime) {
1237 1.94 matt lt6_tmp.ia6t_vltime = newprc->ndprc_vltime;
1238 1.56 rpaulo } else if (remaininglifetime <= TWOHOUR) {
1239 1.56 rpaulo if (auth)
1240 1.94 matt lt6_tmp.ia6t_vltime = newprc->ndprc_vltime;
1241 1.32 itojun } else {
1242 1.32 itojun /*
1243 1.94 matt * newprc->ndprc_vltime <= TWOHOUR &&
1244 1.56 rpaulo * TWOHOUR < remaininglifetime
1245 1.32 itojun */
1246 1.32 itojun lt6_tmp.ia6t_vltime = TWOHOUR;
1247 1.2 itojun }
1248 1.2 itojun
1249 1.32 itojun /* The 2 hour rule is not imposed for preferred lifetime. */
1250 1.94 matt lt6_tmp.ia6t_pltime = newprc->ndprc_pltime;
1251 1.2 itojun
1252 1.32 itojun in6_init_address_ltimes(pr, <6_tmp);
1253 1.2 itojun
1254 1.56 rpaulo /*
1255 1.56 rpaulo * We need to treat lifetimes for temporary addresses
1256 1.56 rpaulo * differently, according to
1257 1.56 rpaulo * draft-ietf-ipv6-privacy-addrs-v2-01.txt 3.3 (1);
1258 1.56 rpaulo * we only update the lifetimes when they are in the maximum
1259 1.56 rpaulo * intervals.
1260 1.56 rpaulo */
1261 1.56 rpaulo if ((ifa6->ia6_flags & IN6_IFF_TEMPORARY) != 0) {
1262 1.56 rpaulo u_int32_t maxvltime, maxpltime;
1263 1.56 rpaulo
1264 1.56 rpaulo if (ip6_temp_valid_lifetime >
1265 1.102 ozaki (u_int32_t)((time_uptime - ifa6->ia6_createtime) +
1266 1.56 rpaulo ip6_desync_factor)) {
1267 1.56 rpaulo maxvltime = ip6_temp_valid_lifetime -
1268 1.102 ozaki (time_uptime - ifa6->ia6_createtime) -
1269 1.56 rpaulo ip6_desync_factor;
1270 1.56 rpaulo } else
1271 1.56 rpaulo maxvltime = 0;
1272 1.56 rpaulo if (ip6_temp_preferred_lifetime >
1273 1.102 ozaki (u_int32_t)((time_uptime - ifa6->ia6_createtime) +
1274 1.56 rpaulo ip6_desync_factor)) {
1275 1.56 rpaulo maxpltime = ip6_temp_preferred_lifetime -
1276 1.102 ozaki (time_uptime - ifa6->ia6_createtime) -
1277 1.56 rpaulo ip6_desync_factor;
1278 1.56 rpaulo } else
1279 1.56 rpaulo maxpltime = 0;
1280 1.56 rpaulo
1281 1.56 rpaulo if (lt6_tmp.ia6t_vltime == ND6_INFINITE_LIFETIME ||
1282 1.56 rpaulo lt6_tmp.ia6t_vltime > maxvltime) {
1283 1.56 rpaulo lt6_tmp.ia6t_vltime = maxvltime;
1284 1.56 rpaulo }
1285 1.56 rpaulo if (lt6_tmp.ia6t_pltime == ND6_INFINITE_LIFETIME ||
1286 1.56 rpaulo lt6_tmp.ia6t_pltime > maxpltime) {
1287 1.56 rpaulo lt6_tmp.ia6t_pltime = maxpltime;
1288 1.56 rpaulo }
1289 1.56 rpaulo }
1290 1.56 rpaulo
1291 1.32 itojun ifa6->ia6_lifetime = lt6_tmp;
1292 1.102 ozaki ifa6->ia6_updatetime = time_uptime;
1293 1.32 itojun }
1294 1.94 matt if (ia6_match == NULL && newprc->ndprc_vltime) {
1295 1.56 rpaulo int ifidlen;
1296 1.56 rpaulo
1297 1.2 itojun /*
1298 1.56 rpaulo * 5.5.3 (d) (continued)
1299 1.32 itojun * No address matched and the valid lifetime is non-zero.
1300 1.32 itojun * Create a new address.
1301 1.2 itojun */
1302 1.56 rpaulo
1303 1.56 rpaulo /*
1304 1.56 rpaulo * Prefix Length check:
1305 1.56 rpaulo * If the sum of the prefix length and interface identifier
1306 1.56 rpaulo * length does not equal 128 bits, the Prefix Information
1307 1.56 rpaulo * option MUST be ignored. The length of the interface
1308 1.56 rpaulo * identifier is defined in a separate link-type specific
1309 1.56 rpaulo * document.
1310 1.56 rpaulo */
1311 1.56 rpaulo ifidlen = in6_if2idlen(ifp);
1312 1.56 rpaulo if (ifidlen < 0) {
1313 1.56 rpaulo /* this should not happen, so we always log it. */
1314 1.106 ozaki log(LOG_ERR, "%s: IFID undefined (%s)\n",
1315 1.106 ozaki __func__, if_name(ifp));
1316 1.56 rpaulo goto end;
1317 1.56 rpaulo }
1318 1.56 rpaulo if (ifidlen + pr->ndpr_plen != 128) {
1319 1.107 ozaki nd6log(LOG_INFO,
1320 1.107 ozaki "invalid prefixlen %d for %s, ignored\n",
1321 1.107 ozaki pr->ndpr_plen, if_name(ifp));
1322 1.56 rpaulo goto end;
1323 1.56 rpaulo }
1324 1.56 rpaulo
1325 1.94 matt if ((ia6 = in6_ifadd(newprc, mcast)) != NULL) {
1326 1.32 itojun /*
1327 1.94 matt * note that we should use pr (not newprc) for reference.
1328 1.32 itojun */
1329 1.32 itojun pr->ndpr_refcnt++;
1330 1.32 itojun ia6->ia6_ndpr = pr;
1331 1.2 itojun
1332 1.32 itojun /*
1333 1.56 rpaulo * draft-ietf-ipngwg-temp-addresses-v2-00 3.3 (2).
1334 1.56 rpaulo * When a new public address is created as described
1335 1.56 rpaulo * in RFC2462, also create a new temporary address.
1336 1.56 rpaulo *
1337 1.56 rpaulo * draft-ietf-ipngwg-temp-addresses-v2-00 3.5.
1338 1.56 rpaulo * When an interface connects to a new link, a new
1339 1.56 rpaulo * randomized interface identifier should be generated
1340 1.56 rpaulo * immediately together with a new set of temporary
1341 1.56 rpaulo * addresses. Thus, we specifiy 1 as the 2nd arg of
1342 1.56 rpaulo * in6_tmpifadd().
1343 1.56 rpaulo */
1344 1.56 rpaulo if (ip6_use_tempaddr) {
1345 1.56 rpaulo int e;
1346 1.56 rpaulo if ((e = in6_tmpifadd(ia6, 1, 1)) != 0) {
1347 1.107 ozaki nd6log(LOG_NOTICE,
1348 1.107 ozaki "failed to create a temporary "
1349 1.107 ozaki "address, errno=%d\n", e);
1350 1.56 rpaulo }
1351 1.56 rpaulo }
1352 1.56 rpaulo
1353 1.56 rpaulo /*
1354 1.32 itojun * A newly added address might affect the status
1355 1.32 itojun * of other addresses, so we check and update it.
1356 1.32 itojun * XXX: what if address duplication happens?
1357 1.32 itojun */
1358 1.32 itojun pfxlist_onlink_check();
1359 1.32 itojun } else {
1360 1.32 itojun /* just set an error. do not bark here. */
1361 1.32 itojun error = EADDRNOTAVAIL; /* XXX: might be unused. */
1362 1.32 itojun }
1363 1.2 itojun }
1364 1.2 itojun
1365 1.2 itojun end:
1366 1.2 itojun splx(s);
1367 1.2 itojun return error;
1368 1.2 itojun }
1369 1.2 itojun
1370 1.2 itojun /*
1371 1.7 itojun * A supplement function used in the on-link detection below;
1372 1.7 itojun * detect if a given prefix has a (probably) reachable advertising router.
1373 1.7 itojun * XXX: lengthy function name...
1374 1.7 itojun */
1375 1.7 itojun static struct nd_pfxrouter *
1376 1.64 christos find_pfxlist_reachable_router(struct nd_prefix *pr)
1377 1.7 itojun {
1378 1.7 itojun struct nd_pfxrouter *pfxrtr;
1379 1.7 itojun
1380 1.7 itojun for (pfxrtr = LIST_FIRST(&pr->ndpr_advrtrs); pfxrtr;
1381 1.7 itojun pfxrtr = LIST_NEXT(pfxrtr, pfr_entry)) {
1382 1.89 roy if (pfxrtr->router->ifp->if_flags & IFF_UP &&
1383 1.89 roy pfxrtr->router->ifp->if_link_state != LINK_STATE_DOWN &&
1384 1.101 ozaki nd6_is_llinfo_probreach(pfxrtr->router))
1385 1.7 itojun break; /* found */
1386 1.7 itojun }
1387 1.7 itojun
1388 1.36 itojun return (pfxrtr);
1389 1.7 itojun }
1390 1.7 itojun
1391 1.7 itojun /*
1392 1.2 itojun * Check if each prefix in the prefix list has at least one available router
1393 1.25 itojun * that advertised the prefix (a router is "available" if its neighbor cache
1394 1.25 itojun * entry is reachable or probably reachable).
1395 1.7 itojun * If the check fails, the prefix may be off-link, because, for example,
1396 1.2 itojun * we have moved from the network but the lifetime of the prefix has not
1397 1.25 itojun * expired yet. So we should not use the prefix if there is another prefix
1398 1.25 itojun * that has an available router.
1399 1.25 itojun * But, if there is no prefix that has an available router, we still regards
1400 1.25 itojun * all the prefixes as on-link. This is because we can't tell if all the
1401 1.2 itojun * routers are simply dead or if we really moved from the network and there
1402 1.2 itojun * is no router around us.
1403 1.2 itojun */
1404 1.7 itojun void
1405 1.73 matt pfxlist_onlink_check(void)
1406 1.2 itojun {
1407 1.2 itojun struct nd_prefix *pr;
1408 1.32 itojun struct in6_ifaddr *ifa;
1409 1.56 rpaulo struct nd_defrouter *dr;
1410 1.56 rpaulo struct nd_pfxrouter *pfxrtr = NULL;
1411 1.2 itojun
1412 1.7 itojun /*
1413 1.7 itojun * Check if there is a prefix that has a reachable advertising
1414 1.7 itojun * router.
1415 1.7 itojun */
1416 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
1417 1.32 itojun if (pr->ndpr_raf_onlink && find_pfxlist_reachable_router(pr))
1418 1.2 itojun break;
1419 1.7 itojun }
1420 1.56 rpaulo /*
1421 1.56 rpaulo * If we have no such prefix, check whether we still have a router
1422 1.56 rpaulo * that does not advertise any prefixes.
1423 1.56 rpaulo */
1424 1.56 rpaulo if (pr == NULL) {
1425 1.62 dyoung TAILQ_FOREACH(dr, &nd_defrouter, dr_entry) {
1426 1.56 rpaulo struct nd_prefix *pr0;
1427 1.56 rpaulo
1428 1.62 dyoung LIST_FOREACH(pr0, &nd_prefix, ndpr_entry) {
1429 1.56 rpaulo if ((pfxrtr = pfxrtr_lookup(pr0, dr)) != NULL)
1430 1.56 rpaulo break;
1431 1.56 rpaulo }
1432 1.56 rpaulo if (pfxrtr)
1433 1.56 rpaulo break;
1434 1.56 rpaulo }
1435 1.56 rpaulo }
1436 1.56 rpaulo if (pr != NULL || (TAILQ_FIRST(&nd_defrouter) && !pfxrtr)) {
1437 1.2 itojun /*
1438 1.32 itojun * There is at least one prefix that has a reachable router,
1439 1.32 itojun * or at least a router which probably does not advertise
1440 1.32 itojun * any prefixes. The latter would be the case when we move
1441 1.32 itojun * to a new link where we have a router that does not provide
1442 1.32 itojun * prefixes and we configure an address by hand.
1443 1.32 itojun * Detach prefixes which have no reachable advertising
1444 1.32 itojun * router, and attach other prefixes.
1445 1.2 itojun */
1446 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
1447 1.32 itojun /* XXX: a link-local prefix should never be detached */
1448 1.32 itojun if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr))
1449 1.32 itojun continue;
1450 1.32 itojun
1451 1.32 itojun /*
1452 1.32 itojun * we aren't interested in prefixes without the L bit
1453 1.32 itojun * set.
1454 1.32 itojun */
1455 1.32 itojun if (pr->ndpr_raf_onlink == 0)
1456 1.32 itojun continue;
1457 1.32 itojun
1458 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 &&
1459 1.32 itojun find_pfxlist_reachable_router(pr) == NULL)
1460 1.32 itojun pr->ndpr_stateflags |= NDPRF_DETACHED;
1461 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0 &&
1462 1.32 itojun find_pfxlist_reachable_router(pr) != 0)
1463 1.32 itojun pr->ndpr_stateflags &= ~NDPRF_DETACHED;
1464 1.32 itojun }
1465 1.32 itojun } else {
1466 1.32 itojun /* there is no prefix that has a reachable router */
1467 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
1468 1.32 itojun if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr))
1469 1.32 itojun continue;
1470 1.32 itojun
1471 1.32 itojun if (pr->ndpr_raf_onlink == 0)
1472 1.32 itojun continue;
1473 1.32 itojun
1474 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0)
1475 1.32 itojun pr->ndpr_stateflags &= ~NDPRF_DETACHED;
1476 1.32 itojun }
1477 1.32 itojun }
1478 1.32 itojun
1479 1.32 itojun /*
1480 1.32 itojun * Remove each interface route associated with a (just) detached
1481 1.32 itojun * prefix, and reinstall the interface route for a (just) attached
1482 1.32 itojun * prefix. Note that all attempt of reinstallation does not
1483 1.32 itojun * necessarily success, when a same prefix is shared among multiple
1484 1.32 itojun * interfaces. Such cases will be handled in nd6_prefix_onlink,
1485 1.32 itojun * so we don't have to care about them.
1486 1.32 itojun */
1487 1.62 dyoung LIST_FOREACH(pr, &nd_prefix, ndpr_entry) {
1488 1.32 itojun int e;
1489 1.32 itojun
1490 1.32 itojun if (IN6_IS_ADDR_LINKLOCAL(&pr->ndpr_prefix.sin6_addr))
1491 1.32 itojun continue;
1492 1.32 itojun
1493 1.32 itojun if (pr->ndpr_raf_onlink == 0)
1494 1.32 itojun continue;
1495 1.32 itojun
1496 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) != 0 &&
1497 1.32 itojun (pr->ndpr_stateflags & NDPRF_ONLINK) != 0) {
1498 1.32 itojun if ((e = nd6_prefix_offlink(pr)) != 0) {
1499 1.107 ozaki nd6log(LOG_ERR,
1500 1.107 ozaki "failed to make %s/%d offlink, errno=%d\n",
1501 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1502 1.107 ozaki pr->ndpr_plen, e);
1503 1.2 itojun }
1504 1.2 itojun }
1505 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_DETACHED) == 0 &&
1506 1.32 itojun (pr->ndpr_stateflags & NDPRF_ONLINK) == 0 &&
1507 1.32 itojun pr->ndpr_raf_onlink) {
1508 1.32 itojun if ((e = nd6_prefix_onlink(pr)) != 0) {
1509 1.107 ozaki nd6log(LOG_ERR,
1510 1.107 ozaki "failed to make %s/%d onlink, errno=%d\n",
1511 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1512 1.107 ozaki pr->ndpr_plen, e);
1513 1.32 itojun }
1514 1.32 itojun }
1515 1.32 itojun }
1516 1.32 itojun
1517 1.32 itojun /*
1518 1.32 itojun * Changes on the prefix status might affect address status as well.
1519 1.32 itojun * Make sure that all addresses derived from an attached prefix are
1520 1.32 itojun * attached, and that all addresses derived from a detached prefix are
1521 1.32 itojun * detached. Note, however, that a manually configured address should
1522 1.32 itojun * always be attached.
1523 1.32 itojun * The precise detection logic is same as the one for prefixes.
1524 1.32 itojun */
1525 1.32 itojun for (ifa = in6_ifaddr; ifa; ifa = ifa->ia_next) {
1526 1.32 itojun if (!(ifa->ia6_flags & IN6_IFF_AUTOCONF))
1527 1.32 itojun continue;
1528 1.32 itojun
1529 1.32 itojun if (ifa->ia6_ndpr == NULL) {
1530 1.32 itojun /*
1531 1.32 itojun * This can happen when we first configure the address
1532 1.32 itojun * (i.e. the address exists, but the prefix does not).
1533 1.32 itojun * XXX: complicated relationships...
1534 1.32 itojun */
1535 1.32 itojun continue;
1536 1.32 itojun }
1537 1.32 itojun
1538 1.32 itojun if (find_pfxlist_reachable_router(ifa->ia6_ndpr))
1539 1.32 itojun break;
1540 1.32 itojun }
1541 1.32 itojun if (ifa) {
1542 1.32 itojun for (ifa = in6_ifaddr; ifa; ifa = ifa->ia_next) {
1543 1.32 itojun if ((ifa->ia6_flags & IN6_IFF_AUTOCONF) == 0)
1544 1.32 itojun continue;
1545 1.32 itojun
1546 1.32 itojun if (ifa->ia6_ndpr == NULL) /* XXX: see above. */
1547 1.32 itojun continue;
1548 1.32 itojun
1549 1.56 rpaulo if (find_pfxlist_reachable_router(ifa->ia6_ndpr)) {
1550 1.56 rpaulo if (ifa->ia6_flags & IN6_IFF_DETACHED) {
1551 1.56 rpaulo ifa->ia6_flags &= ~IN6_IFF_DETACHED;
1552 1.56 rpaulo ifa->ia6_flags |= IN6_IFF_TENTATIVE;
1553 1.56 rpaulo nd6_dad_start((struct ifaddr *)ifa,
1554 1.56 rpaulo 0);
1555 1.87 roy /* We will notify the routing socket
1556 1.87 roy * of the DAD result, so no need to
1557 1.87 roy * here */
1558 1.56 rpaulo }
1559 1.56 rpaulo } else {
1560 1.56 rpaulo if ((ifa->ia6_flags & IN6_IFF_DETACHED) == 0) {
1561 1.56 rpaulo ifa->ia6_flags |= IN6_IFF_DETACHED;
1562 1.97 roy rt_newaddrmsg(RTM_NEWADDR,
1563 1.97 roy (struct ifaddr *)ifa, 0, NULL);
1564 1.56 rpaulo }
1565 1.56 rpaulo }
1566 1.2 itojun }
1567 1.2 itojun }
1568 1.2 itojun else {
1569 1.32 itojun for (ifa = in6_ifaddr; ifa; ifa = ifa->ia_next) {
1570 1.32 itojun if ((ifa->ia6_flags & IN6_IFF_AUTOCONF) == 0)
1571 1.32 itojun continue;
1572 1.32 itojun
1573 1.56 rpaulo if (ifa->ia6_flags & IN6_IFF_DETACHED) {
1574 1.56 rpaulo ifa->ia6_flags &= ~IN6_IFF_DETACHED;
1575 1.56 rpaulo ifa->ia6_flags |= IN6_IFF_TENTATIVE;
1576 1.56 rpaulo /* Do we need a delay in this case? */
1577 1.56 rpaulo nd6_dad_start((struct ifaddr *)ifa, 0);
1578 1.56 rpaulo }
1579 1.32 itojun }
1580 1.2 itojun }
1581 1.2 itojun }
1582 1.2 itojun
1583 1.32 itojun int
1584 1.64 christos nd6_prefix_onlink(struct nd_prefix *pr)
1585 1.2 itojun {
1586 1.32 itojun struct ifaddr *ifa;
1587 1.32 itojun struct ifnet *ifp = pr->ndpr_ifp;
1588 1.32 itojun struct sockaddr_in6 mask6;
1589 1.32 itojun struct nd_prefix *opr;
1590 1.32 itojun u_long rtflags;
1591 1.32 itojun int error = 0;
1592 1.32 itojun
1593 1.32 itojun /* sanity check */
1594 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_ONLINK) != 0) {
1595 1.107 ozaki nd6log(LOG_ERR, "%s/%d is already on-link\n",
1596 1.107 ozaki ip6_sprintf(&pr->ndpr_prefix.sin6_addr), pr->ndpr_plen);
1597 1.51 itojun return (EEXIST);
1598 1.32 itojun }
1599 1.32 itojun
1600 1.32 itojun /*
1601 1.32 itojun * Add the interface route associated with the prefix. Before
1602 1.32 itojun * installing the route, check if there's the same prefix on another
1603 1.32 itojun * interface, and the prefix has already installed the interface route.
1604 1.32 itojun * Although such a configuration is expected to be rare, we explicitly
1605 1.32 itojun * allow it.
1606 1.32 itojun */
1607 1.62 dyoung LIST_FOREACH(opr, &nd_prefix, ndpr_entry) {
1608 1.32 itojun if (opr == pr)
1609 1.32 itojun continue;
1610 1.32 itojun
1611 1.32 itojun if ((opr->ndpr_stateflags & NDPRF_ONLINK) == 0)
1612 1.32 itojun continue;
1613 1.32 itojun
1614 1.32 itojun if (opr->ndpr_plen == pr->ndpr_plen &&
1615 1.32 itojun in6_are_prefix_equal(&pr->ndpr_prefix.sin6_addr,
1616 1.32 itojun &opr->ndpr_prefix.sin6_addr, pr->ndpr_plen))
1617 1.36 itojun return (0);
1618 1.32 itojun }
1619 1.32 itojun
1620 1.32 itojun /*
1621 1.32 itojun * We prefer link-local addresses as the associated interface address.
1622 1.32 itojun */
1623 1.32 itojun /* search for a link-local addr */
1624 1.32 itojun ifa = (struct ifaddr *)in6ifa_ifpforlinklocal(ifp,
1625 1.32 itojun IN6_IFF_NOTREADY | IN6_IFF_ANYCAST);
1626 1.32 itojun if (ifa == NULL) {
1627 1.32 itojun /* XXX: freebsd does not have ifa_ifwithaf */
1628 1.70 dyoung IFADDR_FOREACH(ifa, ifp) {
1629 1.32 itojun if (ifa->ifa_addr->sa_family == AF_INET6)
1630 1.32 itojun break;
1631 1.32 itojun }
1632 1.32 itojun /* should we care about ia6_flags? */
1633 1.32 itojun }
1634 1.32 itojun if (ifa == NULL) {
1635 1.32 itojun /*
1636 1.32 itojun * This can still happen, when, for example, we receive an RA
1637 1.32 itojun * containing a prefix with the L bit set and the A bit clear,
1638 1.32 itojun * after removing all IPv6 addresses on the receiving
1639 1.32 itojun * interface. This should, of course, be rare though.
1640 1.32 itojun */
1641 1.107 ozaki nd6log(LOG_NOTICE, "failed to find any ifaddr"
1642 1.32 itojun " to add route for a prefix(%s/%d) on %s\n",
1643 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1644 1.107 ozaki pr->ndpr_plen, if_name(ifp));
1645 1.36 itojun return (0);
1646 1.32 itojun }
1647 1.2 itojun
1648 1.2 itojun /*
1649 1.32 itojun * in6_ifinit() sets nd6_rtrequest to ifa_rtrequest for all ifaddrs.
1650 1.32 itojun * ifa->ifa_rtrequest = nd6_rtrequest;
1651 1.2 itojun */
1652 1.78 cegger memset(&mask6, 0, sizeof(mask6));
1653 1.85 joerg mask6.sin6_family = AF_INET6;
1654 1.32 itojun mask6.sin6_len = sizeof(mask6);
1655 1.32 itojun mask6.sin6_addr = pr->ndpr_mask;
1656 1.32 itojun /* rtrequest() will probably set RTF_UP, but we're not sure. */
1657 1.32 itojun rtflags = ifa->ifa_flags | RTF_UP;
1658 1.32 itojun if (nd6_need_cache(ifp)) {
1659 1.32 itojun /* explicitly set in case ifa_flags does not set the flag. */
1660 1.108 ozaki rtflags |= RTF_CONNECTED;
1661 1.32 itojun } else {
1662 1.32 itojun /*
1663 1.32 itojun * explicitly clear the cloning bit in case ifa_flags sets it.
1664 1.32 itojun */
1665 1.108 ozaki rtflags &= ~RTF_CONNECTED;
1666 1.32 itojun }
1667 1.101 ozaki error = rtrequest_newmsg(RTM_ADD, (struct sockaddr *)&pr->ndpr_prefix,
1668 1.101 ozaki ifa->ifa_addr, (struct sockaddr *)&mask6, rtflags);
1669 1.32 itojun if (error == 0) {
1670 1.101 ozaki nd6_numroutes++;
1671 1.32 itojun pr->ndpr_stateflags |= NDPRF_ONLINK;
1672 1.32 itojun } else {
1673 1.107 ozaki nd6log(LOG_ERR, "failed to add route for a"
1674 1.32 itojun " prefix (%s/%d) on %s, gw=%s, mask=%s, flags=%lx "
1675 1.32 itojun "errno = %d\n",
1676 1.32 itojun ip6_sprintf(&pr->ndpr_prefix.sin6_addr),
1677 1.32 itojun pr->ndpr_plen, if_name(ifp),
1678 1.32 itojun ip6_sprintf(&((struct sockaddr_in6 *)ifa->ifa_addr)->sin6_addr),
1679 1.107 ozaki ip6_sprintf(&mask6.sin6_addr), rtflags, error);
1680 1.32 itojun }
1681 1.32 itojun
1682 1.36 itojun return (error);
1683 1.32 itojun }
1684 1.32 itojun
1685 1.32 itojun int
1686 1.64 christos nd6_prefix_offlink(struct nd_prefix *pr)
1687 1.32 itojun {
1688 1.32 itojun int error = 0;
1689 1.32 itojun struct ifnet *ifp = pr->ndpr_ifp;
1690 1.32 itojun struct nd_prefix *opr;
1691 1.32 itojun struct sockaddr_in6 sa6, mask6;
1692 1.32 itojun
1693 1.32 itojun /* sanity check */
1694 1.32 itojun if ((pr->ndpr_stateflags & NDPRF_ONLINK) == 0) {
1695 1.107 ozaki nd6log(LOG_ERR, "%s/%d is already off-link\n",
1696 1.107 ozaki ip6_sprintf(&pr->ndpr_prefix.sin6_addr), pr->ndpr_plen);
1697 1.36 itojun return (EEXIST);
1698 1.32 itojun }
1699 1.32 itojun
1700 1.69 dyoung sockaddr_in6_init(&sa6, &pr->ndpr_prefix.sin6_addr, 0, 0, 0);
1701 1.69 dyoung sockaddr_in6_init(&mask6, &pr->ndpr_mask, 0, 0, 0);
1702 1.101 ozaki error = rtrequest_newmsg(RTM_DELETE, (struct sockaddr *)&sa6, NULL,
1703 1.101 ozaki (struct sockaddr *)&mask6, 0);
1704 1.32 itojun if (error == 0) {
1705 1.32 itojun pr->ndpr_stateflags &= ~NDPRF_ONLINK;
1706 1.101 ozaki nd6_numroutes--;
1707 1.2 itojun
1708 1.32 itojun /*
1709 1.32 itojun * There might be the same prefix on another interface,
1710 1.32 itojun * the prefix which could not be on-link just because we have
1711 1.32 itojun * the interface route (see comments in nd6_prefix_onlink).
1712 1.32 itojun * If there's one, try to make the prefix on-link on the
1713 1.32 itojun * interface.
1714 1.32 itojun */
1715 1.62 dyoung LIST_FOREACH(opr, &nd_prefix, ndpr_entry) {
1716 1.32 itojun if (opr == pr)
1717 1.32 itojun continue;
1718 1.2 itojun
1719 1.32 itojun if ((opr->ndpr_stateflags & NDPRF_ONLINK) != 0)
1720 1.32 itojun continue;
1721 1.2 itojun
1722 1.32 itojun /*
1723 1.32 itojun * KAME specific: detached prefixes should not be
1724 1.32 itojun * on-link.
1725 1.32 itojun */
1726 1.32 itojun if ((opr->ndpr_stateflags & NDPRF_DETACHED) != 0)
1727 1.32 itojun continue;
1728 1.2 itojun
1729 1.32 itojun if (opr->ndpr_plen == pr->ndpr_plen &&
1730 1.32 itojun in6_are_prefix_equal(&pr->ndpr_prefix.sin6_addr,
1731 1.32 itojun &opr->ndpr_prefix.sin6_addr, pr->ndpr_plen)) {
1732 1.32 itojun int e;
1733 1.32 itojun
1734 1.32 itojun if ((e = nd6_prefix_onlink(opr)) != 0) {
1735 1.107 ozaki nd6log(LOG_ERR, "failed to "
1736 1.32 itojun "recover a prefix %s/%d from %s "
1737 1.32 itojun "to %s (errno = %d)\n",
1738 1.32 itojun ip6_sprintf(&opr->ndpr_prefix.sin6_addr),
1739 1.32 itojun opr->ndpr_plen, if_name(ifp),
1740 1.107 ozaki if_name(opr->ndpr_ifp), e);
1741 1.32 itojun }
1742 1.32 itojun }
1743 1.32 itojun }
1744 1.32 itojun } else {
1745 1.32 itojun /* XXX: can we still set the NDPRF_ONLINK flag? */
1746 1.107 ozaki nd6log(LOG_ERR, "failed to delete route: "
1747 1.32 itojun "%s/%d on %s (errno = %d)\n",
1748 1.32 itojun ip6_sprintf(&sa6.sin6_addr), pr->ndpr_plen, if_name(ifp),
1749 1.107 ozaki error);
1750 1.2 itojun }
1751 1.2 itojun
1752 1.101 ozaki return error;
1753 1.2 itojun }
1754 1.2 itojun
1755 1.2 itojun static struct in6_ifaddr *
1756 1.94 matt in6_ifadd(struct nd_prefixctl *prc, int mcast)
1757 1.2 itojun {
1758 1.94 matt struct ifnet *ifp = prc->ndprc_ifp;
1759 1.2 itojun struct ifaddr *ifa;
1760 1.32 itojun struct in6_aliasreq ifra;
1761 1.32 itojun struct in6_ifaddr *ia, *ib;
1762 1.32 itojun int error, plen0;
1763 1.2 itojun struct in6_addr mask;
1764 1.94 matt int prefixlen = prc->ndprc_plen;
1765 1.56 rpaulo int updateflags;
1766 1.2 itojun
1767 1.31 itojun in6_prefixlen2mask(&mask, prefixlen);
1768 1.2 itojun
1769 1.32 itojun /*
1770 1.32 itojun * find a link-local address (will be interface ID).
1771 1.32 itojun * Is it really mandatory? Theoretically, a global or a site-local
1772 1.32 itojun * address can be configured without a link-local address, if we
1773 1.32 itojun * have a unique interface identifier...
1774 1.32 itojun *
1775 1.32 itojun * it is not mandatory to have a link-local address, we can generate
1776 1.32 itojun * interface identifier on the fly. we do this because:
1777 1.32 itojun * (1) it should be the easiest way to find interface identifier.
1778 1.32 itojun * (2) RFC2462 5.4 suggesting the use of the same interface identifier
1779 1.32 itojun * for multiple addresses on a single interface, and possible shortcut
1780 1.32 itojun * of DAD. we omitted DAD for this reason in the past.
1781 1.32 itojun * (3) a user can prevent autoconfiguration of global address
1782 1.32 itojun * by removing link-local address by hand (this is partly because we
1783 1.55 rpaulo * don't have other way to control the use of IPv6 on an interface.
1784 1.32 itojun * this has been our design choice - cf. NRL's "ifconfig auto").
1785 1.32 itojun * (4) it is easier to manage when an interface has addresses
1786 1.32 itojun * with the same interface identifier, than to have multiple addresses
1787 1.32 itojun * with different interface identifiers.
1788 1.32 itojun */
1789 1.32 itojun ifa = (struct ifaddr *)in6ifa_ifpforlinklocal(ifp, 0); /* 0 is OK? */
1790 1.2 itojun if (ifa)
1791 1.2 itojun ib = (struct in6_ifaddr *)ifa;
1792 1.2 itojun else
1793 1.2 itojun return NULL;
1794 1.2 itojun
1795 1.2 itojun #if 0 /* don't care link local addr state, and always do DAD */
1796 1.2 itojun /* if link-local address is not eligible, do not autoconfigure. */
1797 1.2 itojun if (((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_NOTREADY) {
1798 1.2 itojun printf("in6_ifadd: link-local address not ready\n");
1799 1.2 itojun return NULL;
1800 1.2 itojun }
1801 1.2 itojun #endif
1802 1.2 itojun
1803 1.2 itojun /* prefixlen + ifidlen must be equal to 128 */
1804 1.32 itojun plen0 = in6_mask2len(&ib->ia_prefixmask.sin6_addr, NULL);
1805 1.32 itojun if (prefixlen != plen0) {
1806 1.107 ozaki nd6log(LOG_INFO, "wrong prefixlen for %s "
1807 1.32 itojun "(prefix=%d ifid=%d)\n",
1808 1.107 ozaki if_name(ifp), prefixlen, 128 - plen0);
1809 1.2 itojun return NULL;
1810 1.2 itojun }
1811 1.2 itojun
1812 1.2 itojun /* make ifaddr */
1813 1.2 itojun
1814 1.56 rpaulo memset(&ifra, 0, sizeof(ifra));
1815 1.32 itojun /*
1816 1.32 itojun * in6_update_ifa() does not use ifra_name, but we accurately set it
1817 1.32 itojun * for safety.
1818 1.32 itojun */
1819 1.32 itojun strncpy(ifra.ifra_name, if_name(ifp), sizeof(ifra.ifra_name));
1820 1.94 matt sockaddr_in6_init(&ifra.ifra_addr, &prc->ndprc_prefix.sin6_addr, 0, 0, 0);
1821 1.32 itojun /* prefix */
1822 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[0] &= mask.s6_addr32[0];
1823 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[1] &= mask.s6_addr32[1];
1824 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[2] &= mask.s6_addr32[2];
1825 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[3] &= mask.s6_addr32[3];
1826 1.2 itojun
1827 1.2 itojun /* interface ID */
1828 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[0] |=
1829 1.32 itojun (ib->ia_addr.sin6_addr.s6_addr32[0] & ~mask.s6_addr32[0]);
1830 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[1] |=
1831 1.32 itojun (ib->ia_addr.sin6_addr.s6_addr32[1] & ~mask.s6_addr32[1]);
1832 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[2] |=
1833 1.32 itojun (ib->ia_addr.sin6_addr.s6_addr32[2] & ~mask.s6_addr32[2]);
1834 1.32 itojun ifra.ifra_addr.sin6_addr.s6_addr32[3] |=
1835 1.32 itojun (ib->ia_addr.sin6_addr.s6_addr32[3] & ~mask.s6_addr32[3]);
1836 1.33 itojun
1837 1.32 itojun /* new prefix mask. */
1838 1.69 dyoung sockaddr_in6_init(&ifra.ifra_prefixmask, &mask, 0, 0, 0);
1839 1.2 itojun
1840 1.56 rpaulo /* lifetimes */
1841 1.94 matt ifra.ifra_lifetime.ia6t_vltime = prc->ndprc_vltime;
1842 1.94 matt ifra.ifra_lifetime.ia6t_pltime = prc->ndprc_pltime;
1843 1.2 itojun
1844 1.32 itojun /* XXX: scope zone ID? */
1845 1.2 itojun
1846 1.32 itojun ifra.ifra_flags |= IN6_IFF_AUTOCONF; /* obey autoconf */
1847 1.2 itojun
1848 1.56 rpaulo /*
1849 1.56 rpaulo * Make sure that we do not have this address already. This should
1850 1.56 rpaulo * usually not happen, but we can still see this case, e.g., if we
1851 1.56 rpaulo * have manually configured the exact address to be configured.
1852 1.56 rpaulo */
1853 1.56 rpaulo if (in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr) != NULL) {
1854 1.56 rpaulo /* this should be rare enough to make an explicit log */
1855 1.56 rpaulo log(LOG_INFO, "in6_ifadd: %s is already configured\n",
1856 1.56 rpaulo ip6_sprintf(&ifra.ifra_addr.sin6_addr));
1857 1.56 rpaulo return (NULL);
1858 1.56 rpaulo }
1859 1.56 rpaulo
1860 1.56 rpaulo /*
1861 1.56 rpaulo * Allocate ifaddr structure, link into chain, etc.
1862 1.56 rpaulo * If we are going to create a new address upon receiving a multicasted
1863 1.56 rpaulo * RA, we need to impose a random delay before starting DAD.
1864 1.56 rpaulo * [draft-ietf-ipv6-rfc2462bis-02.txt, Section 5.4.2]
1865 1.56 rpaulo */
1866 1.56 rpaulo updateflags = 0;
1867 1.56 rpaulo if (mcast)
1868 1.56 rpaulo updateflags |= IN6_IFAUPDATE_DADDELAY;
1869 1.56 rpaulo if ((error = in6_update_ifa(ifp, &ifra, NULL, updateflags)) != 0) {
1870 1.107 ozaki nd6log(LOG_ERR, "failed to make ifaddr %s on %s (errno=%d)\n",
1871 1.32 itojun ip6_sprintf(&ifra.ifra_addr.sin6_addr), if_name(ifp),
1872 1.107 ozaki error);
1873 1.36 itojun return (NULL); /* ifaddr must not have been allocated. */
1874 1.32 itojun }
1875 1.2 itojun
1876 1.32 itojun ia = in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr);
1877 1.2 itojun
1878 1.36 itojun return (ia); /* this is always non-NULL */
1879 1.2 itojun }
1880 1.2 itojun
1881 1.2 itojun int
1882 1.64 christos in6_tmpifadd(
1883 1.64 christos const struct in6_ifaddr *ia0, /* corresponding public address */
1884 1.64 christos int forcegen,
1885 1.64 christos int dad_delay)
1886 1.56 rpaulo {
1887 1.56 rpaulo struct ifnet *ifp = ia0->ia_ifa.ifa_ifp;
1888 1.56 rpaulo struct in6_ifaddr *newia, *ia;
1889 1.56 rpaulo struct in6_aliasreq ifra;
1890 1.56 rpaulo int i, error;
1891 1.56 rpaulo int trylimit = 3; /* XXX: adhoc value */
1892 1.56 rpaulo int updateflags;
1893 1.56 rpaulo u_int32_t randid[2];
1894 1.56 rpaulo u_int32_t vltime0, pltime0;
1895 1.56 rpaulo
1896 1.56 rpaulo memset(&ifra, 0, sizeof(ifra));
1897 1.56 rpaulo strncpy(ifra.ifra_name, if_name(ifp), sizeof(ifra.ifra_name));
1898 1.56 rpaulo ifra.ifra_addr = ia0->ia_addr;
1899 1.56 rpaulo /* copy prefix mask */
1900 1.56 rpaulo ifra.ifra_prefixmask = ia0->ia_prefixmask;
1901 1.56 rpaulo /* clear the old IFID */
1902 1.56 rpaulo for (i = 0; i < 4; i++) {
1903 1.56 rpaulo ifra.ifra_addr.sin6_addr.s6_addr32[i] &=
1904 1.56 rpaulo ifra.ifra_prefixmask.sin6_addr.s6_addr32[i];
1905 1.56 rpaulo }
1906 1.56 rpaulo
1907 1.56 rpaulo again:
1908 1.56 rpaulo if (in6_get_tmpifid(ifp, (u_int8_t *)randid,
1909 1.56 rpaulo (const u_int8_t *)&ia0->ia_addr.sin6_addr.s6_addr[8], forcegen)) {
1910 1.107 ozaki nd6log(LOG_NOTICE, "failed to find a good random IFID\n");
1911 1.56 rpaulo return (EINVAL);
1912 1.56 rpaulo }
1913 1.56 rpaulo ifra.ifra_addr.sin6_addr.s6_addr32[2] |=
1914 1.56 rpaulo (randid[0] & ~(ifra.ifra_prefixmask.sin6_addr.s6_addr32[2]));
1915 1.56 rpaulo ifra.ifra_addr.sin6_addr.s6_addr32[3] |=
1916 1.56 rpaulo (randid[1] & ~(ifra.ifra_prefixmask.sin6_addr.s6_addr32[3]));
1917 1.56 rpaulo
1918 1.56 rpaulo /*
1919 1.56 rpaulo * in6_get_tmpifid() quite likely provided a unique interface ID.
1920 1.56 rpaulo * However, we may still have a chance to see collision, because
1921 1.56 rpaulo * there may be a time lag between generation of the ID and generation
1922 1.56 rpaulo * of the address. So, we'll do one more sanity check.
1923 1.56 rpaulo */
1924 1.56 rpaulo for (ia = in6_ifaddr; ia; ia = ia->ia_next) {
1925 1.56 rpaulo if (IN6_ARE_ADDR_EQUAL(&ia->ia_addr.sin6_addr,
1926 1.56 rpaulo &ifra.ifra_addr.sin6_addr)) {
1927 1.56 rpaulo if (trylimit-- == 0) {
1928 1.56 rpaulo /*
1929 1.56 rpaulo * Give up. Something strange should have
1930 1.56 rpaulo * happened.
1931 1.56 rpaulo */
1932 1.107 ozaki nd6log(LOG_NOTICE,
1933 1.107 ozaki "failed to find a unique random IFID\n");
1934 1.56 rpaulo return (EEXIST);
1935 1.56 rpaulo }
1936 1.56 rpaulo forcegen = 1;
1937 1.56 rpaulo goto again;
1938 1.56 rpaulo }
1939 1.56 rpaulo }
1940 1.56 rpaulo
1941 1.56 rpaulo /*
1942 1.56 rpaulo * The Valid Lifetime is the lower of the Valid Lifetime of the
1943 1.56 rpaulo * public address or TEMP_VALID_LIFETIME.
1944 1.56 rpaulo * The Preferred Lifetime is the lower of the Preferred Lifetime
1945 1.56 rpaulo * of the public address or TEMP_PREFERRED_LIFETIME -
1946 1.56 rpaulo * DESYNC_FACTOR.
1947 1.56 rpaulo */
1948 1.56 rpaulo if (ia0->ia6_lifetime.ia6t_vltime != ND6_INFINITE_LIFETIME) {
1949 1.56 rpaulo vltime0 = IFA6_IS_INVALID(ia0) ? 0 :
1950 1.56 rpaulo (ia0->ia6_lifetime.ia6t_vltime -
1951 1.102 ozaki (time_uptime - ia0->ia6_updatetime));
1952 1.56 rpaulo if (vltime0 > ip6_temp_valid_lifetime)
1953 1.56 rpaulo vltime0 = ip6_temp_valid_lifetime;
1954 1.56 rpaulo } else
1955 1.56 rpaulo vltime0 = ip6_temp_valid_lifetime;
1956 1.56 rpaulo if (ia0->ia6_lifetime.ia6t_pltime != ND6_INFINITE_LIFETIME) {
1957 1.56 rpaulo pltime0 = IFA6_IS_DEPRECATED(ia0) ? 0 :
1958 1.56 rpaulo (ia0->ia6_lifetime.ia6t_pltime -
1959 1.102 ozaki (time_uptime - ia0->ia6_updatetime));
1960 1.56 rpaulo if (pltime0 > ip6_temp_preferred_lifetime - ip6_desync_factor){
1961 1.56 rpaulo pltime0 = ip6_temp_preferred_lifetime -
1962 1.56 rpaulo ip6_desync_factor;
1963 1.56 rpaulo }
1964 1.56 rpaulo } else
1965 1.56 rpaulo pltime0 = ip6_temp_preferred_lifetime - ip6_desync_factor;
1966 1.56 rpaulo ifra.ifra_lifetime.ia6t_vltime = vltime0;
1967 1.56 rpaulo ifra.ifra_lifetime.ia6t_pltime = pltime0;
1968 1.56 rpaulo
1969 1.56 rpaulo /*
1970 1.56 rpaulo * A temporary address is created only if this calculated Preferred
1971 1.56 rpaulo * Lifetime is greater than REGEN_ADVANCE time units.
1972 1.56 rpaulo */
1973 1.56 rpaulo if (ifra.ifra_lifetime.ia6t_pltime <= ip6_temp_regen_advance)
1974 1.56 rpaulo return (0);
1975 1.56 rpaulo
1976 1.56 rpaulo /* XXX: scope zone ID? */
1977 1.56 rpaulo
1978 1.56 rpaulo ifra.ifra_flags |= (IN6_IFF_AUTOCONF|IN6_IFF_TEMPORARY);
1979 1.56 rpaulo
1980 1.56 rpaulo /* allocate ifaddr structure, link into chain, etc. */
1981 1.56 rpaulo updateflags = 0;
1982 1.57 rpaulo if (dad_delay)
1983 1.56 rpaulo updateflags |= IN6_IFAUPDATE_DADDELAY;
1984 1.56 rpaulo if ((error = in6_update_ifa(ifp, &ifra, NULL, updateflags)) != 0)
1985 1.56 rpaulo return (error);
1986 1.56 rpaulo
1987 1.56 rpaulo newia = in6ifa_ifpwithaddr(ifp, &ifra.ifra_addr.sin6_addr);
1988 1.56 rpaulo if (newia == NULL) { /* XXX: can it happen? */
1989 1.107 ozaki nd6log(LOG_ERR,
1990 1.107 ozaki "ifa update succeeded, but we got no ifaddr\n");
1991 1.56 rpaulo return (EINVAL); /* XXX */
1992 1.56 rpaulo }
1993 1.56 rpaulo newia->ia6_ndpr = ia0->ia6_ndpr;
1994 1.56 rpaulo newia->ia6_ndpr->ndpr_refcnt++;
1995 1.56 rpaulo
1996 1.56 rpaulo /*
1997 1.56 rpaulo * A newly added address might affect the status of other addresses.
1998 1.56 rpaulo * XXX: when the temporary address is generated with a new public
1999 1.56 rpaulo * address, the onlink check is redundant. However, it would be safe
2000 1.56 rpaulo * to do the check explicitly everywhere a new address is generated,
2001 1.56 rpaulo * and, in fact, we surely need the check when we create a new
2002 1.56 rpaulo * temporary address due to deprecation of an old temporary address.
2003 1.56 rpaulo */
2004 1.56 rpaulo pfxlist_onlink_check();
2005 1.56 rpaulo
2006 1.56 rpaulo return (0);
2007 1.56 rpaulo }
2008 1.56 rpaulo
2009 1.56 rpaulo static int
2010 1.2 itojun in6_init_prefix_ltimes(struct nd_prefix *ndpr)
2011 1.2 itojun {
2012 1.7 itojun
2013 1.26 itojun /* check if preferred lifetime > valid lifetime. RFC2462 5.5.3 (c) */
2014 1.2 itojun if (ndpr->ndpr_pltime > ndpr->ndpr_vltime) {
2015 1.107 ozaki nd6log(LOG_INFO, "preferred lifetime"
2016 1.2 itojun "(%d) is greater than valid lifetime(%d)\n",
2017 1.107 ozaki (u_int)ndpr->ndpr_pltime, (u_int)ndpr->ndpr_vltime);
2018 1.2 itojun return (EINVAL);
2019 1.2 itojun }
2020 1.7 itojun if (ndpr->ndpr_pltime == ND6_INFINITE_LIFETIME)
2021 1.2 itojun ndpr->ndpr_preferred = 0;
2022 1.2 itojun else
2023 1.102 ozaki ndpr->ndpr_preferred = time_uptime + ndpr->ndpr_pltime;
2024 1.7 itojun if (ndpr->ndpr_vltime == ND6_INFINITE_LIFETIME)
2025 1.2 itojun ndpr->ndpr_expire = 0;
2026 1.2 itojun else
2027 1.102 ozaki ndpr->ndpr_expire = time_uptime + ndpr->ndpr_vltime;
2028 1.2 itojun
2029 1.2 itojun return 0;
2030 1.2 itojun }
2031 1.2 itojun
2032 1.2 itojun static void
2033 1.94 matt in6_init_address_ltimes(struct nd_prefix *newpr,
2034 1.60 christos struct in6_addrlifetime *lt6)
2035 1.2 itojun {
2036 1.7 itojun
2037 1.7 itojun /* Valid lifetime must not be updated unless explicitly specified. */
2038 1.32 itojun /* init ia6t_expire */
2039 1.32 itojun if (lt6->ia6t_vltime == ND6_INFINITE_LIFETIME)
2040 1.32 itojun lt6->ia6t_expire = 0;
2041 1.32 itojun else {
2042 1.102 ozaki lt6->ia6t_expire = time_uptime;
2043 1.32 itojun lt6->ia6t_expire += lt6->ia6t_vltime;
2044 1.2 itojun }
2045 1.7 itojun
2046 1.2 itojun /* init ia6t_preferred */
2047 1.7 itojun if (lt6->ia6t_pltime == ND6_INFINITE_LIFETIME)
2048 1.2 itojun lt6->ia6t_preferred = 0;
2049 1.2 itojun else {
2050 1.102 ozaki lt6->ia6t_preferred = time_uptime;
2051 1.2 itojun lt6->ia6t_preferred += lt6->ia6t_pltime;
2052 1.2 itojun }
2053 1.2 itojun }
2054 1.2 itojun
2055 1.2 itojun /*
2056 1.2 itojun * Delete all the routing table entries that use the specified gateway.
2057 1.2 itojun * XXX: this function causes search through all entries of routing table, so
2058 1.16 itojun * it shouldn't be called when acting as a router.
2059 1.2 itojun */
2060 1.2 itojun void
2061 1.61 christos rt6_flush(struct in6_addr *gateway, struct ifnet *ifp)
2062 1.2 itojun {
2063 1.4 itojun int s = splsoftnet();
2064 1.2 itojun
2065 1.2 itojun /* We'll care only link-local addresses */
2066 1.2 itojun if (!IN6_IS_ADDR_LINKLOCAL(gateway)) {
2067 1.2 itojun splx(s);
2068 1.2 itojun return;
2069 1.2 itojun }
2070 1.2 itojun
2071 1.65 dyoung rt_walktree(AF_INET6, rt6_deleteroute, (void *)gateway);
2072 1.2 itojun splx(s);
2073 1.2 itojun }
2074 1.2 itojun
2075 1.2 itojun static int
2076 1.65 dyoung rt6_deleteroute(struct rtentry *rt, void *arg)
2077 1.2 itojun {
2078 1.2 itojun struct in6_addr *gate = (struct in6_addr *)arg;
2079 1.2 itojun
2080 1.2 itojun if (rt->rt_gateway == NULL || rt->rt_gateway->sa_family != AF_INET6)
2081 1.36 itojun return (0);
2082 1.2 itojun
2083 1.104 ozaki if (!IN6_ARE_ADDR_EQUAL(gate, &satosin6(rt->rt_gateway)->sin6_addr))
2084 1.36 itojun return (0);
2085 1.26 itojun
2086 1.26 itojun /*
2087 1.32 itojun * Do not delete a static route.
2088 1.32 itojun * XXX: this seems to be a bit ad-hoc. Should we consider the
2089 1.32 itojun * 'cloned' bit instead?
2090 1.32 itojun */
2091 1.32 itojun if ((rt->rt_flags & RTF_STATIC) != 0)
2092 1.36 itojun return (0);
2093 1.32 itojun
2094 1.32 itojun /*
2095 1.2 itojun * We delete only host route. This means, in particular, we don't
2096 1.2 itojun * delete default route.
2097 1.2 itojun */
2098 1.2 itojun if ((rt->rt_flags & RTF_HOST) == 0)
2099 1.36 itojun return (0);
2100 1.2 itojun
2101 1.66 dyoung return (rtrequest(RTM_DELETE, rt_getkey(rt), rt->rt_gateway,
2102 1.103 ozaki rt_mask(rt), rt->rt_flags, NULL));
2103 1.2 itojun }
2104 1.7 itojun
2105 1.7 itojun int
2106 1.64 christos nd6_setdefaultiface(int ifindex)
2107 1.7 itojun {
2108 1.91 rmind ifnet_t *ifp;
2109 1.7 itojun int error = 0;
2110 1.7 itojun
2111 1.91 rmind if ((ifp = if_byindex(ifindex)) == NULL) {
2112 1.91 rmind return EINVAL;
2113 1.91 rmind }
2114 1.7 itojun if (nd6_defifindex != ifindex) {
2115 1.7 itojun nd6_defifindex = ifindex;
2116 1.91 rmind nd6_defifp = nd6_defifindex > 0 ? ifp : NULL;
2117 1.54 rpaulo
2118 1.54 rpaulo /*
2119 1.54 rpaulo * Our current implementation assumes one-to-one maping between
2120 1.54 rpaulo * interfaces and links, so it would be natural to use the
2121 1.54 rpaulo * default interface as the default link.
2122 1.54 rpaulo */
2123 1.54 rpaulo scope6_setdefault(nd6_defifp);
2124 1.7 itojun }
2125 1.7 itojun
2126 1.36 itojun return (error);
2127 1.7 itojun }
2128