You are here

BSR 64000 deny ipv6 traffic

4 posts / 0 new
Last post
eddie303
BSR 64000 deny ipv6 traffic

Hello,

we have a BSR64000 running version 7.0.0.9 and getting the log flooded with messages like:

[06/24-02:45:29.34- 00:EVT]-E-ARD.189 ARD ACCIM lib get logif fails ipAddr fe80::f6f2:6dff:fed7:ee3f macDomain 6 error UNKNOWN, file ../../apps/ard/ardDb.c line 5189
[06/24-02:45:29.29- 00:EVT]-E-ARD.189 ARD ACCIM lib get logif fails ipAddr fe80::1aa6:f7ff:fec5:a0c5 macDomain 1 error UNKNOWN, file ../../apps/ard/ardDb.c line 5189
[06/24-02:45:29.22- 00:EVT]-E-ARD.189 ARD ACCIM lib get logif fails ipAddr fe80::f6f2:6dff:fed8:77e3 macDomain 4 error UNKNOWN, file ../../apps/ard/ardDb.c line 5189
[06/24-02:45:29.22- 00:EVT]-E-ARD.189 ARD ACCIM lib get logif fails ipAddr fe80::9ade:d0ff:fef0:6a39 macDomain 4 error UNKNOWN, file ../../apps/ard/ardDb.c line 5189
[06/24-02:45:29.22- 00:EVT]-E-ARD.189 ARD ACCIM lib get logif fails ipAddr fe80::1eb7:2cff:fea0:13e8 macDomain 4 error UNKNOWN, file ../../apps/ard/ardDb.c line 5189
[06/24-02:45:29.16- 00:EVT]-E-ARD.189 ARD ACCIM lib get logif fails ipAddr fe80::f6f2:6dff:fea7:6b1d macDomain 4 error UNKNOWN, file ../../apps/ard/ardDb.c line 5189
[06/24-02:45:29.02- 00:EVT]-E-ARD.189 ARD ACCIM lib get logif fails ipAddr fe80::ee08:6bff:fe3f:38c1 macDomain 2 error UNKNOWN, file ../../apps/ard/ardDb.c line 5189
[06/24-02:45:28.92- 00:EVT]-E-ARD.189 ARD ACCIM lib get logif fails ipAddr fe80::9ade:d0ff:fe70:6af macDomain 3 error UNKNOWN, file ../../apps/ard/ardDb.c line 5189

no ipv6 unicast-routing is present in the config, also made an access list named "default" containing "deny ipv6 any any" and added it to loopback1 (bundle master):

ipv6 traffic-filter default in
ipv6 traffic-filter default out

The log is still flooded. The packets are coming from CPE side from SOHO routers, as it turned out.

Please, someone tell us, how to effectively deny ipv6 traffic on the interface!
Thanks in advance!

mbowe
Block in config files

If your CMTS doesn't have working/stable IPv6, then you might be better off blocking IPv6 in the cm config files

eg I normally have the following commands, but if you want to block IPv6 then just leave that particular stanza out

/* set the default behaviour: */
SnmpMibObject docsDevFilterLLCUnmatchedAction.0 Integer 1; /* discard */
/* permit IPv4: */
SnmpMibObject docsDevFilterLLCIfIndex.1 Integer 0;
SnmpMibObject docsDevFilterLLCProtocolType.1 Integer 1; /* ethertype */
SnmpMibObject docsDevFilterLLCProtocol.1 Integer 2048;
SnmpMibObject docsDevFilterLLCStatus.1 Integer 4; /* createAndGo */
/* permit IPv6: */
SnmpMibObject docsDevFilterLLCIfIndex.2 Integer 0;
SnmpMibObject docsDevFilterLLCProtocolType.2 Integer 1; /* ethertype */
SnmpMibObject docsDevFilterLLCProtocol.2 Integer 34525;
SnmpMibObject docsDevFilterLLCStatus.2 Integer 4; /* createAndGo */
/* permit ARP: */
SnmpMibObject docsDevFilterLLCIfIndex.3 Integer 0;
SnmpMibObject docsDevFilterLLCProtocolType.3 Integer 1; /* ethertype */
SnmpMibObject docsDevFilterLLCProtocol.3 Integer 2054;
SnmpMibObject docsDevFilterLLCStatus.3 Integer 4; /* createAndGo */

eddie303
Thanks!

Thanks for the help, it resolved the issue! :)

cmcaldas
another option

on the BSR, add no ipv6 unicast-routing
this would be global, so just from the config, not on the downstream or upstream interfaces

docsis