Identity Association IPv6 mode impossible to apply

[tgurr]

To accommodate the change away from ISC-DCHP defaults the "Track interface" IPv6 mode now has a sibling called "Identity Association" which does the same except it is not automatically starting ISC-DHCPv6 and Radvd router advertisements to allow better interoperability with Kea and Dnsmasq setups. Dnsmasq is now the default for DHCPv4 and DHCPv6 as well as RA out of the box. One thing that the upstream software cannot cover is prefix delegation so that is no longer offered by default. Use another DHCPv6 server in this case.

I'm trying to figure out what I've to change in my setup related to the statements above. When it was first mentioned that ISC-DHCP will be deprecated I already moved my stuff over to using "Dnsmasq DNS & DHCP" like the DHCP ranges for my home and guest vlans as well as the reservations / host overrides. So after updating to 26.1 today I uninstalled the os-isc-dhcp plugin, so far so good, things still appear to work as intended. However when trying to change the "IPv6 Configuration Type" in either my home or guest vlan/interface from "Track Interface (legacy)" to  the new "Identity association" and try to save the changes I get an error message:

The following input errors were detected:

The DHCPv6 Server is active on this interface and it can be used only with a static IPv6 configuration. Please disable the DHCPv6 Server service on this interface first, then change the interface configuration.

which makes me wonder what the actual problem is since "Track Interface (legacy)" works without any issue, is it because I use "Dnsmasq DNS & DHCP"? I can't seem to find an option to do what I'm instructed by "disable the DHCPv6 Server service on this interface first" like in only use Dnsmasq DNS & DHCP for IPv4, like there was for ISC-DHCP and probably also is for Kea with its two separate Kea DHCPv4 & Kea DHCPv6 services to enable/disable. But that would somehow contradict to the statement of

[...] to allow better interoperability with Kea and Dnsmasq setups

On another more or less unrelated note, some parts of the release notes are harder to read/understand for me than they maybe could be, for example:

One thing that the upstream software cannot cover is prefix delegation so that is no longer offered by default. Use another DHCPv6 server in this case.

"the upstream software": which one? supposedly Dnsmasq? Why not call it by it's name?
"Use another DHCPv6 server in this case": when Dnsmasq doesn't work in this case and Kea is the new alternative to the now deprecated ISC-DHCP, why not just write "Use Kea DHCPv6" in this case? Or doesn't Kea work here as well, or are there too many other alternatives to mention them?

And another thing I was kind of scared is because the talk is all about DHCP and IPv6, I was afraid that removing the ISC plugin would also remove the option for the WAN interface to select "DHCPv6" in its "IPv6 Configuration Type" option, so a small mention that it doesn't touch that part and/or that they're completely unrelated and this option will stay would've probably been reassuring as well.

[nero355]

So after updating to 26.1 today I uninstalled the os-isc-dhcp plugin, so far so good, things still appear to work as intended.

However when trying to change the "IPv6 Configuration Type" in either my home or guest vlan/interface from "Track Interface (legacy)" to  the new "Identity association" and try to save the changes I get an error message:

The following input errors were detected:

The DHCPv6 Server is active on this interface and it can be used only with a static IPv6 configuration. Please disable the DHCPv6 Server service on this interface first, then change the interface configuration.

which makes me wonder what the actual problem is since "Track Interface (legacy)" works without any issue, is it because I use "Dnsmasq DNS & DHCP"? I can't seem to find an option to do what I'm instructed by "disable the DHCPv6 Server service on this interface first" like in only use Dnsmasq DNS & DHCP for IPv4, like there was for ISC-DHCP and probably also is for Kea with its two separate Kea DHCPv4 & Kea DHCPv6 services to enable/disable.

There were some reports of the option "Track Interface (legacy)" not properly disabling I believe in another topic so maybe the fix for that bug didn't work out completely as it should have ?!

My guess is it still thinks you are using ISC DHCPv6 for some reason...

On another more or less unrelated note, some parts of the release notes are harder to read/understand for me than they maybe could be, for example:

One thing that the upstream software cannot cover is prefix delegation so that is no longer offered by default. Use another DHCPv6 server in this case.

"the upstream software": which one? supposedly Dnsmasq? Why not call it by it's name?
"Use another DHCPv6 server in this case": when Dnsmasq doesn't work in this case and Kea is the new alternative to the now deprecated ISC-DHCP, why not just write "Use Kea DHCPv6" in this case? Or doesn't Kea work here as well, or are there too many other alternatives to mention them?

And another thing I was kind of scared is because the talk is all about DHCP and IPv6, I was afraid that removing the ISC plugin would also remove the option for the WAN interface to select "DHCPv6" in its "IPv6 Configuration Type" option, so a small mention that it doesn't touch that part and/or that they're completely unrelated and this option will stay would've probably been reassuring as well.

I was wondering the same and totally agree with you :)

[bazineta]

I think this to be a bug, as I believe you'll find that you can't set the IPv6 Configuration Type to 'None' on the affected interface, either. In short, you're pretty much stuck with whatever settings that interface has at the moment, it seems.

[btb62]

To accommodate the change away from ISC-DCHP defaults the "Track interface" IPv6 mode now has a sibling called "Identity Association" which does the same except it is not automatically starting ISC-DHCPv6 and Radvd router advertisements to allow better interoperability with Kea and Dnsmasq setups. Dnsmasq is now the default for DHCPv4 and DHCPv6 as well as RA out of the box. One thing that the upstream software cannot cover is prefix delegation so that is no longer offered by default. Use another DHCPv6 server in this case.

I'm trying to figure out what I've to change in my setup related to the statements above. When it was first mentioned that ISC-DHCP will be deprecated I already moved my stuff over to using "Dnsmasq DNS & DHCP" like the DHCP ranges for my home and guest vlans as well as the reservations / host overrides. So after updating to 26.1 today I uninstalled the os-isc-dhcp plugin, so far so good, things still appear to work as intended. However when trying to change the "IPv6 Configuration Type" in either my home or guest vlan/interface from "Track Interface (legacy)" to  the new "Identity association" and try to save the changes I get an error message:

The following input errors were detected:

The DHCPv6 Server is active on this interface and it can be used only with a static IPv6 configuration. Please disable the DHCPv6 Server service on this interface first, then change the interface configuration.

I came across the same issue with the warning message about DHCP server being active. The way to resolve it is to temporarily install the ISC plugin, (DHCPv6 I think was active on the LAN), then you can make the changes. It seems the wrong way round, but must be a bug, when done of course ISC plugin can be removed.

This worked for me, hoe it helps you too.

[franco]

This old bug has been haunting the code for a while.

If you are sure you don't need the ISC-DHCPv6 anymore you can run this from the command line

# pluginctl -f dhcpdv6.<interfaceid>

where <interfaceid> is lan or opt1, etc.

If you are sure you're not using DHCPv6 at all you can also drop the whole DHCPv6 configuration from System: Configuration: History: Components.


Cheers,
Franco

[tgurr]

Thanks for all the helpful feedback.

I think this to be a bug, as I believe you'll find that you can't set the IPv6 Configuration Type to 'None' on the affected interface, either. In short, you're pretty much stuck with whatever settings that interface has at the moment, it seems.

Correct, I'm also unable to set the interface to 'None'.

I came across the same issue with the warning message about DHCP server being active. The way to resolve it is to temporarily install the ISC plugin, (DHCPv6 I think was active on the LAN), then you can make the changes. It seems the wrong way round, but must be a bug, when done of course ISC plugin can be removed.

This worked for me, hoe it helps you too.

Thanks, I'm pretty sure I've disabled the checkbox on on ISC for the networks also tried to switch to "Identity Association" before removing the plugin, but will try your suggestion as well.

If you are sure you don't need the ISC-DHCPv6 anymore you can run this from the command line

# pluginctl -f dhcpdv6.<interfaceid>

where <interfaceid> is lan or opt1, etc.

If you are sure you're not using DHCPv6 at all you can also drop the whole DHCPv6 configuration from System: Configuration: History: Components.

I guess I can be pretty sure in this case as I've already uninstalled the plugin?

> pluginctl -f dhcpdv6.<interfaceid>

Will try that, thanks.

> If you are sure you're not using DHCPv6 at all you can also drop the whole DHCPv6 configuration from System: Configuration: History: Components.

If Dnsmasq doesn't do anything here, as in if "not using DHCPv6" means "either ISC DHCP or Kea" AND this doesn't apply to my WAN interface having "IPv6 Configuration Type: DHCPv6" then this is true for me.

However I can't find the "Components" under History you've mentioned, the menu path only goes as deep as System: Configuration: History for me where I can view the diffs and download, remove backups and so on. But I can't find anything related to "Components".