Page MenuHomeVyOS Platform

Add FRR no-ipv6-auto-ra option
Open, NormalPublicFEATURE REQUEST

Description

Summary

FRR is sending RA packets with different settings at the same time as radvd. Add the ability to disable this.
The no bgp ipv6-auto-ra disables this.

Use case

By default, bgpd can ask Zebra to enable sending IPv6 router advertisement messages on interfaces. For example, this happens for unnumbered peers support or when extended-nexthop capability is used. The no form of this command disables such behaviour.

Additional information

https://docs.frrouting.org/en/latest/bgp.html#clicmd-bgp-ipv6-auto-ra

Proposed CLI

set protocols bgp parameters disable-ipv6-auto-ra

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)
Forum thread
https://forum.vyos.io/t/frr-bgp-ipv6-auto-ra/

Event Timeline

Viacheslav triaged this task as Normal priority.

Comparing to other vendors this setting should be set on interface level and not in bgp settings.

For example on HPE Comware the setting to disable it is at interface level (vlan interface or L3-interface if you configured a physical interface with "ipv6 address"):

ipv6 nd ra halt

On Arista EOS its:

ipv6 nd ra disabled

Ref: https://www.arista.com/en/um-eos/eos-ipv6#xx1143369

Also relevant refs:

https://github.com/FRRouting/frr/issues/7738

https://github.com/FRRouting/frr/issues/17051

https://github.com/FRRouting/frr/pull/16354

From the looks of it there seems to be possible to suppress or enable RA per interface in the FRR config.

So it should be tested if disabling auto-ra in FRR ("no bgp ipv6-auto-ra") will still make radvd (or whatever is used) to send out RA's for interfaces configured out in the VyOS config to have RA enabled (rather than in the FRR config).

suppress-ra can currently be configured at the interface level in FRR, but this setting is overridden by bgpd if extended-nexthop is enabled

https://docs.frrouting.org/en/latest/ipv6.html#clicmd-ipv6-nd-suppress-ra

I also tested it and it does