具体是这样的:
第一次启动 ros ,正常拨号,正常获取 ipv6pd (假定 2409:aaaa::/60 ),终端可以获得 ipv6 地址。
如果之后 pppoe 断线重播(运营商踢掉、网线重插等),又重新获取了新的 ipv6pd (假定 2409:bbbb::/60 ),终端就会获得 aaaa 和 bbbb 两个前缀的地址。等再遇到重播,终端就会得到 bbbb 和 cccc 两个前缀的地址。
如果一直不重启 ros ,终端总会拿到前一个和当前两个前缀的 ipv6 。图上的 1892:af90 就是上次拨号下发的前缀。
已经尝试调整过 preferred-lifetime 和 valid-lifetime ,没有效果,两个地址会在终端一直存在。
贴一下配置请帮忙看看是那里的问题,版本 chr7.19.3 (stable):
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no name=LAN
set [ find default-name=ether2 ] disable-running-check=no name=WAN
/interface pppoe-client
add add-default-route=yes disabled=no interface=WAN max-mru=1480 max-mtu=1480 name=pppoe-out1 use-peer-dns=yes user=**************
/ip dhcp-server option
add code=3 name=option1 value="'192.168.1.100'"
add code=6 name=option2 value="'192.168.1.100'"
/ip pool
add name=dhcp_pool0 ranges=192.168.1.10-192.168.1.40
/ip dhcp-server
add address-pool=dhcp_pool0 interface=LAN lease-time=2h name=dhcp1
/system logging action
set 0 memory-lines=200
/certificate settings
set builtin-trust-anchors=not-trusted
/ip neighbor discovery-settings
set discover-interface-list=none
/ip settings
set max-neighbor-entries=16384
/ipv6 settings
set max-neighbor-entries=8192
/ip address
add address=192.168.1.1/24 interface=LAN network=192.168.1.0
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=192.168.1.1 gateway=192.168.1.1
/ip dns
set allow-remote-requests=yes max-concurrent-tcp-sessions=50
/ip firewall filter
add action=drop chain=input comment="drop invalid" connection-state=invalid
add action=drop chain=forward comment="drop invalid" connection-state=invalid
/ip firewall mangle
add action=change-mss chain=forward disabled=yes new-mss=clamp-to-pmtu out-interface=pppoe-out1 protocol=tcp tcp-flags=syn
/ip firewall nat
add action=endpoint-independent-nat chain=srcnat comment=FullCone-Nat protocol=udp
add action=endpoint-independent-nat chain=dstnat comment=FullCone-Nat protocol=udp
add action=masquerade chain=srcnat out-interface=pppoe-out1
/ip service
set ftp disabled=yes
set ssh disabled=yes
set telnet disabled=yes
set www address=192.168.1.0/24
set winbox address=192.168.1.0/24
set api disabled=yes
set api-ssl disabled=yes
/ipv6 address
add address=::1 from-pool=cmcc interface=LAN
/ipv6 dhcp-client
add default-route-tables=main interface=pppoe-out1 pool-name=cmcc request=prefix
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked disabled=yes
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid disabled=yes
add action=accept chain=input comment="defconf: accept ICMPv6" disabled=yes protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" disabled=yes port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." disabled=yes dst-port=546 log=yes protocol=udp src-address=fe80::/16
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" disabled=yes in-interface=!LAN
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=established,related,untracked disabled=yes
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid disabled=yes
add action=accept chain=forward comment="defconf: accept ICMPv6" disabled=yes protocol=icmpv6
add action=accept chain=forward disabled=yes dst-port=2256 log=yes protocol=tcp
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" disabled=yes in-interface=!LAN
/ipv6 firewall mangle
add action=change-mss chain=forward new-mss=clamp-to-pmtu out-interface=pppoe-out1 packet-mark="" protocol=tcp tcp-flags=syn
/ipv6 nd
set [ find default=yes ] advertise-dns=no hop-limit=64 interface=LAN
/ipv6 nd prefix default
set preferred-lifetime=10m valid-lifetime=30m
/system clock
set time-zone-name=Asia/Shanghai
/tool graphing interface
add interface=pppoe-out1
这是一个专为移动设备优化的页面(即为了让你能够在 Google 搜索结果里秒开这个页面),如果你希望参与 V2EX 社区的讨论,你可以继续到 V2EX 上打开本讨论主题的完整版本。
V2EX 是创意工作者们的社区,是一个分享自己正在做的有趣事物、交流想法,可以遇见新朋友甚至新机会的地方。
V2EX is a community of developers, designers and creative people.