Page MenuHomeVyOS Platform
Create Task
Maniphest T7531

Add FRR no-ipv6-auto-ra option
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Summary

FRR is sending RA packets with different settings at the same time as radvd. Add the ability to disable this.
The no bgp ipv6-auto-ra disables this.

Use case

By default, bgpd can ask Zebra to enable sending IPv6 router advertisement messages on interfaces. For example, this happens for unnumbered peers support or when extended-nexthop capability is used. The no form of this command disables such behaviour.

Additional information

https://docs.frrouting.org/en/latest/bgp.html#clicmd-bgp-ipv6-auto-ra

Proposed CLI

set protocols bgp parameters disable-ipv6-auto-ra

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Feature (new functionality)
Forum thread
https://forum.vyos.io/t/frr-bgp-ipv6-auto-ra/

Related Objects

Event Timeline

Viacheslav created this task.Jun 7 2025, 3:58 PM
Viacheslav triaged this task as Normal priority.
Viacheslav updated the task description. (Show Details)Jun 7 2025, 4:02 PM
Viacheslav updated the task description. (Show Details)Jun 7 2025, 4:05 PM
c-po added projects: VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.3).Jun 7 2025, 5:17 PM
Apachez subscribed.Jun 7 2025, 8:50 PM

Comparing to other vendors this setting should be set on interface level and not in bgp settings.

For example on HPE Comware the setting to disable it is at interface level (vlan interface or L3-interface if you configured a physical interface with "ipv6 address"):

ipv6 nd ra halt

On Arista EOS its:

ipv6 nd ra disabled

Ref: https://www.arista.com/en/um-eos/eos-ipv6#xx1143369

Apachez added a comment.Jun 7 2025, 9:19 PM

Also relevant refs:

https://github.com/FRRouting/frr/issues/7738

https://github.com/FRRouting/frr/issues/17051

https://github.com/FRRouting/frr/pull/16354

From the looks of it there seems to be possible to suppress or enable RA per interface in the FRR config.

So it should be tested if disabling auto-ra in FRR ("no bgp ipv6-auto-ra") will still make radvd (or whatever is used) to send out RA's for interfaces configured out in the VyOS config to have RA enabled (rather than in the FRR config).

factor2431 subscribed.Jun 9 2025, 5:54 PM

suppress-ra can currently be configured at the interface level in FRR, but this setting is overridden by bgpd if extended-nexthop is enabled

https://docs.frrouting.org/en/latest/ipv6.html#clicmd-ipv6-nd-suppress-ra

I also tested it and it does

pasik subscribed.Jun 9 2025, 5:55 PM
factor2431 added a comment.Jun 20 2025, 9:03 AM

https://github.com/vyos/vyos-1x/pull/4568

factor2431 added a comment.Jun 20 2025, 10:31 AM

https://github.com/vyos/vyos-documentation/pull/1648

factor2431 mentioned this in rVYOSONEX64b15157fa2c: T7531: Add FRR no bgp ipv6-auto-ra option.Jun 24 2025, 4:14 AM
Restricted Repository Identity mentioned this in rVYOSONEX0752a2713694: Merge pull request #4568 from factor2431/current.Jun 24 2025, 4:14 AM
c-po changed the task status from Open to Needs testing.Jun 24 2025, 4:14 AM
c-po assigned this task to factor2431.
c-po moved this task from Need Triage to Completed on the VyOS Rolling board.
c-po moved this task from Completed to Backport Candidates on the VyOS Rolling board.
c-po edited projects, added VyOS 1.5 Circinus; removed VyOS 1.5 Circinus (1.5-stream-2025-Q2).
c-po subscribed.

This is also available in FRR 9.1 used by VyOS 1.4 sagitta. We should add it there, too

https://docs.frrouting.org/en/stable-9.1/bgp.html#clicmd-bgp-ipv6-auto-ra

factor2431 added a comment.Jul 2 2025, 4:37 AM

Confirmed working on 2025.07.01-0813-rolling, interfaces no longer appears in ra-interfaces after setting and resetting BGP

factor2431@172-22-105-8:~$ vtysh -c 'show ipv6 nd ra-interfaces'
VRF: default
  Interfaces:

  Interfaces(msec):

factor2431@172-22-105-8:~$ show version 
Version:          VyOS 2025.07.01-0813-rolling
Release train:    current
Release flavor:   generic

Built by:         autobuild@vyos.net
Built on:         Tue 01 Jul 2025 08:13 UTC
Build UUID:       06a12250-40a8-4072-86c5-e20045614f59
Build commit ID:  3e5696d501e1b3

Architecture:     x86_64
Boot via:         installed image
System type:      KVM guest
Secure Boot:      n/a (BIOS)

Copyright:        VyOS maintainers and contributors
Viacheslav closed this task as Resolved.Jul 2 2025, 5:44 AM
Viacheslav moved this task from Backport Candidates to Completed on the VyOS Rolling board.
Viacheslav edited projects, added VyOS 1.5 Circinus (1.5-stream-2025-Q2); removed VyOS 1.5 Circinus.Jul 2 2025, 5:47 AM
Viacheslav moved this task from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
Viacheslav moved this task from Backlog to Finished on the VyOS 1.4 Sagitta (1.4.3) board.
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.Jul 9 2025, 1:13 PM
dmbaturin mentioned this in 1.4.3.Jul 17 2025, 8:18 AM