IPv6 Duplicate Address issue

I'm having a problem involving IPv6 with stateless autoconfig on my network. I have a Cisco 800 series router and we have several VLAN interfaces each configured with an IPv6 prefix. The problem I'm noticing is that whenever any host on the network tries to start up with stateless autoconfig they immediately detect a duplicate address for whatever address they are trying to use.
I performed a packet capture and what I'm seeing is that when the host selects an IPv6 address to use, it performs the Neighbor Solicitation to check if the address is in use. I immediately see the exact same Neighbor Solicitation message echo'd back with the source MAC being the Cisco router. This causes the host to reject the address as a duplicate since it is receiving a Neigbor Soliciation for the same address it is attempting to use.
This happens on all of the VLANs I have configured for IPv6. The basic VLAN config is like this:
interface Vlan109
 description Engineering VLAN
 ip address .....
 ip helper-address .....
 ip nat inside
 ip virtual-reassembly in
 ip tcp adjust-mss 1300
 ipv6 address HE-ENG ::/64 eui-64
 ipv6 enable
 ipv6 nd ra interval 60
Attached is a PCAP with some ICMPv6 traffic. You can see that the NS messages are duplicated and the source of the duplicates seems to be the Cisco router (70:ca:9b:e0:94:2e). Does anyone know what is going on here?

Hi,
Under you interface val config can you try adding:-
int vlan 109
ipv6 address autoconfig
Worth a try
Regards
Alex

Similar Messages

  • EA6900 IPv6 invalid address issue

    I’m trying to setup IPv6 on my router (EA6900). My cable modem is a Motorola Surfboard 6120 DOCSIS 3.0 which is IPv6 compatible. The network interface card in my PC has IPv6 setup on it. My ISP (Charter Communication) has setting instructions at http://www.myaccount.charter.com/customers/Support.aspx?SupportArticleID=2665#prep4ip6 . I follow the instructions and I get this error from the router:
    I have also tried setting the 6rd tunnel to “automatic” but nothing happens. Any suggestions? To me it seems that the router is asking for a full IPv6 address when it should be accepting a prefix, perhaps a firmware defect.
    Solved!
    Go to Solution.

    Just remove the /32 off the IPv6 IP Address. The prefix length is specified underneath.
    Please remember to Kudo those that help you.
    Linksys
    Communities Technical Support

  • DAD Ipv6 Duplicate Address Detection

    Hi everyone,
    My questions are; If a node starts a DAD process and send a NS, is it creates an entry on its neighbour cache for target address? Also if it recieve a NA packet for this NS we know that target address is duplicate and we can`t assign it, but what about neighbour cache? Is this NA update neighbor cache?  
    Consequently , can DAD process update neighbor cache and used for reachibilty?
    All replies will be appreciated.
    Gokmen...

    Hi Gokmen,
    During the TENTATIVE Step of Autoconfiguration we verify the IPv6 Addresses.
    We start with Link-Local Address with DAD and if we receive a NA, two cases:
    - Normal case, the interface is disabled for IPv6 (see remark below)
    - SeND. We retry twice. If after 3 attempts, computed CGA are not unique we disable the Interface for IPv6 and report an Error (I tested it!)
    Now about DAD itself, it is explained in rfc4862
    http://tools.ietf.org/html/rfc4862#section-5.4.4
    Quite funny the RFC says that the interface is  disabled for a link-local only if it is derived from a MAC Address  otherwise IP operation MAY continue... Quite funny as I don't see how we  could continue with a duplicated Link-local address!!!!
    Now when it is the turn of other Addresses, if we receive a NA, the Address is not initialized by the local Node.
    AFAIK, while the interface is in TENTATIVE mode we are not supposed to build the Neighbor Cache but only verify our own addresses and other task very well defined.
    The address is not initialized and may be once the interface is enabled and no longer in TENTATIVE mode we can resolve this Neighbor MAC Address but I would be surprised that it would be done while in TENTATIVE mode during DAD!!!
    I stay tuned... As somebody may correct me if I am wrong!
    You may be interested by page 16 and 17, click on the graphics to see the animations...
    http://www.fredbovy.com/Tutorial/IPv6Tutorial-RELEASE2.html
    For more details about autoconfiguration you may be interested by this video (Presentation also available from slideshare, please check my wiki page)
    http://www.youtube.com/watch?v=958sRC306UE
    It would be funny
    Kind Regards,
    Fred
    15 years ccie #3013
    18 years ccsi #33517 (former #95003)
    IPv6 Forum Gold Certified Engineer
    IPv6 Forum Gold Certified Trainer
    Email: [email protected]
    Web: http://www.fredbovy.com
    Wicki: http://www.fredbovy.com/MediaWiki
    Twitter: http://twitter.com/#!/Fr
    Skype: FredericBovy

  • IPv6 Duplicate error msg on GNS3

    Hello,
    I am trying IPv6 Lab on GNS3,   but I am again and again getting the following duplicate error message on my GNS3 router,
    %IPV6-4-DUPLICATE: Duplicate address FE80::C000:13FF:FE80:0 on FastEthernet0/0
    I tried changing my Interface Link-Local address, but no result, Please let me know how to get it resolved ?

    Hi,
    Unfortunately, you have not solved the problem - you have only deactivated the mechanism that reports the problem. The issue with the packets sent by your router looping back to the same router persists, and it may cause another problems in future. I caution you against running your setup like this, especially if you use it for learning - because of the packets being fed back to the router, the behavior of your topology may be different.
    Just curious: when you run your router attached to the VirtualBox instance for some time (more than one minute) and reports the IPv6 address conflict (i.e. without the workaround you've suggested earlier), what does the show cdp neighbor show? Does this input contain an entry about this very router? If yes, it definitely confirms the packets being reflected back to the router for some obscure reason.
    Do you perhaps have an option of running your GNS3 on another machine, or on another operating system? At this point, I am fairly sure that the problem is somewhere in the way GNS3 ties together a VirtualBox instance and an IOS router instance. However, this is not about solving IOS issues anymore (and it never was as it turns out), this is about possible issue in GNS3 or in your particular setup. Unfortunately, there are many variables in play, including the precise settings of GNS3, VirtualBox, your particular operating system and the software running on it.
    Best regards,
    Peter

  • How can I turn off IPv6 temporary addresses in a enterprise environment

    So in a default configuration Vista and Windows 7 clients will use IPv6 temporary address (per RFC 3041), but I would like to be able to disable this with a GPO.
    I know I can do this by using a startup script tied to a GPO using the netsh interface ipv6 set privacy state=disabled store=persistent but I really do not want to run a logon script especially when as you can see in the command it is a persistent
    setting.
    Any ideas on using a registry based GPO for this?

    Hi,
    OK, I understand what you want. But after I use the Process Monitor to capture the behavior, I found that a lot of registry keys would be changed. So you can not set it via registry unless the IPv6 is disabled.
    Thanks for understanding.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”
    Thank you again for the answer.
    As a follow up question... How does one suggest/request a change in default behavior in a MS product?
    While the RFC 3041 addresses might be nice to have for the average consumer they are not ideal in a enterprise environment. I have found that the temporary addresses will register in DNS, but this doesn't completely solve the issue of tracking and accountability,
    you would still need a application to query, correlate and store that information.
    So it would be nice if the business versions of Windows Vista/7/2K8 and the next client OS would not have this behavior by default.

  • Business partner address issue

    Hi Experts,
    I am involved in a CRM upgrade project from 4.0 to 5.1.
    There is a typical problem.
    For some business partner types, all the BPs are having double address maintained in the database,i.e., the address of the business partners are maintaned twice, though only one address has been entered for them during BP address entry.
    So whenever we are working with tcodes like opportunity, it is prompting us to select one of the address from the pop-up. Whenever we are entering any partner value in the Partner tab, a pop up comes to select one of the address though both the addresses are same.
    What I saw in ADRC table is there are 2address no.s maintained for the same address.
    No clue why it is happening and how to rectify it.
    Please help, its an urgent issue.
    Regards,
    Sangeeta

    Hi,
       You can write an executable report to determine the duplicate addresses and then delete them selectively from ADRC table using the API
    BAPI_BUPA_ADDRESS_REMOVE
    or using delete statement and then calling
    commit_work
       If you are using mobile sales application and having the same problem, then i would advise you to use Middleware concepts of Bdoc creation to create bupa_main Bdocs with the delta mode set properly for address and then trigger the mobile bridge programmatically to create the relevant sBdocs and replicate to the clients.
      Also, if you would this problem in R/3, then you would need to trigger the bupa_main adapter object upload using request loads.
    Reward if helpful.
    Thanks,
    Sudipta.

  • Reassigning IPv6 temporary address when it receives router advertisements

    Hi everybody.
    I've just met a problem with IPv6 connectivity.
    *My environment*
    I list my environment that I tested as follows.
    1. MacBook Pro (A)
    OS Version: 10.6.4
    Card Type: AirPort Extreme (0x14E4, 0x93)
    Firmware Version: Broadcom BCM43xx 1.0 (5.10.131.16.1)
    IPv6 temporary address setting: net.inet6.ip6.use_tempaddr=1
    2. AP+Router
    TimeCapsule
    N.B., I experienced same problem under other sets of router and access point (Cisco's ones). So, let me skip to write the detail of this.
    3. MacBook Pro (B) (No problem with this Laptop)
    OS Version: 10.6.4
    Card Type: AirPort Extreme (0x168C, 0x87)
    Firmware Version: Atheros 5416: 2.0.19.10
    IPv6 temporary address setting: net.inet6.ip6.use_tempaddr=1
    N.B., All user data and settings are transferred to MacBook Pro (A). I think the difference between these two MacBooks is about hardwares.
    *The problem*
    1. Connect the MacBook Pro (A) to AP+Router.
    2. Receive IPv6 router advertisement from the router. (router lifetime=1800, valid lifetime=2592000, preferred lifetime=604800)
    3. Assign both IPv6 EUI-64 address and temporary address.
    4. Receive IPv6 router advertisement from the router again, 70 sec after previous one.
    5. Both the EUI-64 and temporary addresses are removed, and then same EUI-64 address and _new_ temporary address are assigned.
    The problem here is that MacBook Pro (A) configures _new_ temporary address, or it removes old temporary address. This causes additional issues on TCP connections because TCP sessions become no longer available after the temporary address has changed.
    This problem is not experienced my old MacBook Pro (B); i.e., it keeps the temporary address even after receiving router advertisements.
    All the data and setting in MacBook Pro (A) are transferred from MacBook Pro (B).
    Therefore, I think the problem is due to hardwares.
    I prefer to use IPv6 because I'm in a networking group and also prefer to use temporary addresses.
    Do you experience same problem or any suggestions to me?
    If you need additional environment description, please ask me.
    Thank you in advance, and sorry for my poor English.
    Message was edited by: scyphus

    This bug has been stealthily fixed in the update http://support.apple.com/kb/HT4250 today, though I have received no reply from Apple bug reporter site.

  • Nexus 5548 - %ARP-3-DUP_SRCIP_PROBE: Duplicate address Detected

    Hello.
    Looking for some assistance on the following please, I'll try to include a lot of detail:
    I noticed we're receiving repeating messages on a pair of Nexus 5548UP switches, regarding duplicate IP's, and the IP's in question are the mgmt0 of each respective Nexus switch; which are connected to each other and uplinked to two 3750X switches which are also linked to each other (not as a stack, with optics).
    Here is a sample of the syslog message:  %ARP-3-DUP_SRCIP_PROBE:  arp [####]  Duplicate address Detected. Probe  packet received from zzzz.zzzz.zzzz on mgmt0 with destination set to our local ip, xxx.xxx.xxx.xxx
    And in ascii art, here is a diagram:  SW1&2 are 3750X (running 15.x code) and NX1&2 are Nexus 5548UP (running 6.x code)
    SW1---SW2
    |           |
    NX1---NX2
    Pretty basic box/"ring", just in case the diagram doesn't format well, with rapid spanning-tree in effect.  The Nexus are Layer2 only, and the 3750X's are Layer 2 & 3 /w HSRP on a few SVI's in them.  All vlans can pass over the connecting trunks.  And on the Nexus, the management interface (mgmt0) is connected to 3750X (NX1 to SW1 and NX2 to SW2); e.g. management is done over this vrf interface, versus it flowing through a trunk interface to a SVI on the Nexus.
    I know these messages to be erroneous as far an being actual duplicate IP's on the network, and have seen a few posts that indicate a command ("no ip arp gratuitous hsrp duplicate") typically referencing a Nexus 7000 setup has helped, but obviously as described that's not involved here.  Note: Placing that command on the mgmt0 interface of the two nexus had no positive effect.  The messages didn't start showing until after HSRP was enabled on the applicable 3750X SVI's - so seems a likely correlation.
    Essentially looking to clear this up (ideally) or suppress the messages since they're false.  Any ideas?
    Thanks!

    For those encountering this same issue, here is some information that may lead you to a resolve.
    I decided to open a TAC case to get some direct assistance, and I was directed to the 3750X's and a new feature in the 15.x code, "ip device tracking".  I was directed to remove that without specific details / steps on how to best do it (e.g. "no ip device tracking" does not remove it from the global config, as of 15.2(1)E anyway and is the most current at the time of this posting), and that didn't take, giving the message: % IP device tracking is disabled at the interface level by removing the relevant configs.  However, after doing some research on the command, I can across some similar posts on 15.x code and duplicate IP messages.... Here's two posts I referenced:
    https://supportforums.cisco.com/thread/2244042
    https://supportforums.cisco.com/thread/2239656
    I opted for the "no macro auto monitor" command in the 3750X's in global config, as mentioned in the above post(s) - This did stop the messages from occurring in the Nexus switches.  IMPORTANT NOTE:  I noticed that it did appear to bounce all the switch ports however, which could impact production - Be advised!
    I cannot speak to if the interface level command 'nmsp attach suppress' is a better route to go, which is also referenced in the posts (first one primarily) - I went the other route to not have all the extra config line entries.  I have asked Cisco what the true impact of the "no macro auto monitor" command is, and am waiting a response - Ideally there's little to none, probably depending on if you want to make use of device tracking or not... in my case, I suspect I don't have a need for this and thus there's no impact - I shall see.
    It would be ideal if code is released to disable this service / feature in the future more gracefully and/or code changes are done to remedy this issue so you can have the feature enabled (or not).  I akin this much like the "vstack" service that was introduced around 12.2(55/58)SE IOS that couldn't be disabled & left an open TCP port (not good for security scans), then with 12.2(58)SE2 they allowed it to be disabled (e.g. "no vstack" in global config).
    Hopefully these details prove of value.
    Regards.
    NOTE:  Since it doesn't seem you can"answer" your own posts, which seems silly; please note I consider this item resolved / answered.

  • %IP-4-DUPADDR: Duplicate address

    Hi, I've been getting the follwoing message on my c2600 (version 13.3) router since last december (according to the log file).
    005179: .Dec 28 04:35:08.652 AUS: %IP-4-DUPADDR: Duplicate address xxx.xxx.xxx.xx on
    FastEthernet0/0, sourced by 0015.f987.941a
    The symptom of the problem is that occassionally the network looses connactivity.
    The mac addresses are both for Cisco devices. One is the router and i'm not sure what the other is possibly a firewall.
    The Cisco site says that we can change the mac address of one of the offending items ?
    Which would be the best one to change?
    How can i find out what the other device is?
    What if any issue arise with changing the mac address ?
    Proably other questions that i should be asking as well, but i'll get to those later.
    thanks in advance for any reponses.

    changing the mac-address will not help.
    You have to change the ip address.
    You first have to find out what/where is the other device.
    For that you can follow the L2 path.
    Go the switch to which the router is connected on fast0/0. If you don't know the switch, try 'sho cdp nei'.
    Once on the switch, check the mac-address with the command 'show mac-address address x.x.x'. It should give the port.
    Check what device is attached to this port.
    If another switch, repeat the operation above until you find the end device.
    Gilles.

  • Duplicate address recieved

    Hello,
    We had an incident recently where a router expectantly reloaded - while it restarted the logs on all adjacent routers received the following message in their log:
    %TAGCON-3-DUP_ADDR_RCVD: Duplicate Address 10.1.1.254 advertised by peer 192.168.63.252:0 is already bound to 192.168.60.251:0
    I understand why this error occurred - it's because I have the same loopback IP addresses on multiple routers and the reason for this is we have DSL customers who have BGP sessions with us and can authenticate to any of 6 routers.  The loopback IP is the IP address that their BGP session is set to peer with, and since they could 'land' on any one of six routers I need to have that same loopback on all six routers.
    Is there a better way to implement what I have and still achieve the same goal or filter out the prefixes that LDP advertises? - I know there is a command like the below, but this doesn't appear to do the filtering. 
    mpls ldp advertise-labels for 10 (where 10 is an access list)
    Another issue is that while the router was rebooting, it caused a significant interruption to other routers on the network.  I know I haven't supplied much detail about this as there isn't much to supply, however, it seems to relate to the error message I received above - or perhaps it's a result of the mpls network under significant load while learning the prefixes from the router that just reloaded.  Would MPLS Graceful restart assist here?
    Many thanks,
    Jonathan.

    Hi Renan,
    I don't think the crashed was caused by the dup addr - in fact I'd be very surprised if did.
    The problem came when the router was restarting - that's when I saw the dup addr in the router's log and the rest of the network paused while this was going on.
    Thanks,
    Jonathan

  • Duplicate address

    Hi,
    I would appreciate some advise on the following:
    1) If 2 PCs have the same IP address on the network, what would be the impact?
    2) If a PC is having the same IP address as the gateway, what would be the impact? How do we track on the network if it happens?
    3) What would be the impact when I encountered %HSRP-4-DUPADDR: Duplicate address 192.168.1.1 on Vlan502, sourced by 0000.0c07.ac46? I tried to look into the configurations of the network devices but do not find any duplicate HSRP ip addresses, could it be the external WAN link which is using the same HSRP ip address as the router which causes it?
    4) Any impact of having same HSRP groups for 2 different VTP domains?
    5) For the above, to avoid unauthorised people to access the network, especially those who plug in a switch to disrupt the network, as well as avoid people from using the same ip address as the gateway, other than or in addition to bpdu guard, is it advisable to implement mac address tie to IP address on the DHCP server? If not, any suggestions?
    Thanks
    Christina

    When Hot Standby Router Protocol (HSRP) is running on a device, the %HSRP-4-DUPADDR:Duplicate address [IP_address] on [chars], sourced by [enet] error message can appear on the console if the IP address in an HSRP message received on the specified interface is the same as the IP address of the router receiving the message. The most likely cause of this condition is a network loop or a misconfigured switch that is causing the router to see its own HSRP hello messages.
    Check the configurations on all the HSRP routers to ensure that the interface IP addresses are unique. Check that no Layer-2 loops exist. If port channels are configured, check that the switch is configured correctly for port channels. Issue the standby use-bia command so that the error message displays the interface MAC address of the sending router, which can be used to determine if the error message is caused by a misconfigured router or a network loop.

  • IPv6 Static address

    I have a Swann Communication security camera system with their DVR8-4000 hooked to an IPv4 router, connected to the Internet using the new HughesNet Gen4 service. 
    The Swann DVR wired to my router requires a static IP address.  HughesNet Gen4 is implemented with IPv6 and I am told that it does not accommodate an IPv4 type static address.
    I have discussed the issue with both company’s technical support.  HughesNet Gen4 reps recognize the issue and may support static addressing in the future, but not now.  Swann reps will not modify their implementation because of the relatively small Gen4 market.  The Swann rep suggested that replacing my IPv4 router with an IPv6 router might resolve the “static IP address” issue.
    I am looking at several Linksys IPv6 routers including the EA4500 SMART WiFi Wireless Router N900, but know too little about IPv4, IPv6 and router/static addressing to proceed unassisted.
    I will be grateful for any guidance; including 1) can I implement a static address with an Linksys IPv6 router cdonnected to Gen4?  2) Which Linksys routers offer IPv6 support?  3) How does one go about setting an IPv6 static address using HughesNet Gen4 on a Linksys router?

    For your 1st question, the EA4500 does support manual ipv6 but only for 6rd tunneling. For your 2nd question, E4200 v1&2 and the EA series routers support ipv6. Last, for your 3rd question; as long as you have the 6rd tunnel settings from your ISP then you will be able manually set ipv6 on your router.

  • IPv6 Temporary Address

    I am little confused about the IPv6 temporary address. From my understanding, by default both Win7 and MAC comuputers generate IPv6 temporary address once they learn a prefix from RA message. And more imporant, they will use the temporary address as the source of the communications. For ex,  when a computer has one IPv6 address(got from DHCP) and one temporary address, it will use the temporary address for communications and the DHCP address will not be used at all. Has anyone seen any issues arised from using temporary address? Do you force computers to not using temporary address?
    Following notes are taken from RFC4941 about the use of temporary address:
    "The use of temporary addresses may cause unexpected difficulties with    some applications.  As described below, some servers refuse to accept    communications from clients for which they cannot map the IP address    into a DNS name.  In addition, some applications may not behave    robustly if temporary addresses are used and an address expires    before the application has terminated, or if it opens multiple    sessions, but expects them to all use the same addresses.    Consequently, the use of temporary addresses SHOULD be disabled by    default in order to minimize potential disruptions.  Individual    applications, which have specific knowledge about the normal duration    of connections, MAY override this as appropriate.
    If anyone can share their experience of using temporary address in production network, that will be great!
    Thanks.
    Zhenning

    So temporary addresses, or privacy addresses as they are somtimes called, work well for a lot of applications.  If you do not care about the privacy afforded by temporary addresses, you an disable them:
    http://blackundertone.wordpress.com/2011/08/04/disable-windows-7-ipv6-random-temporary-addresses/
    http://tech.buraglio.com/2011/07/macos-107-and-ipv6-privacy-addressing.html
    Also, you can configure the routers such that the devices themselves do not use SLAAC at all and rely exclusively on DHCP, depending on whether or not your DHCPv6 server is managing addresses. 
    See http://blogs.cisco.com/borderless/ipv6-automatic-addressing/ for more tips.

  • How to get rid of duplicate addresses all over the place?

    Duplicate addresses appears all over the places: on my mac (in the mail program) and in my ios devices.
    I suspect that it occurs during some synchronisation activities but how to get rid of this once and for all?
    Thanks for your help. It helps also if some tell me that I am not alone in that kind of trouble

    iCloud- Resolving duplicate Contacts after setting up iCloud Contacts

  • How to create a duplicate address book contact?

    This seems so simple yet I cannot determine how to create a new duplicate address book contact. I have a few contacts from the same company and want to change the variable data instead of re entering the data
    I can create a new contact, copy the data of the record I want to duplicate yet when I paste the info into the new record - address book puts everything into one field.
    Why not a duplicate contact command?
    GRRRR

    Rich,
    According to Address Book Help:
    To duplicate an address card:
    Select an address card.
    Choose Edit > Copy, and then choose Edit > Paste.
    Works for me

Maybe you are looking for