Wired 802.1x; dhcp6c template

Development
,
1

Hello,

I’ve recently spent some time configuring vyos for at&t fiber (directly connected to ONT):

While i expected to end up keeping some configuration outside of vyos config (eg. wpa certs/configs), i was a bit surprised to eventually having to edit linux configs for wired wpa_supplicant.

Another surprise was hardcoded NA=1/PD=2 for dhcp6c (in https://github.com/vyos/vyos-1x/blob/current/data/templates/dhcp-client/ipv6.tmpl)

Just wanted to understand, are those cases going to be sooner or later addressed / contribution accepted / included to roadmap. Any clarifications or considerations are appreciated.

Thanks!

1 Like
2

Hi @rawzen,

there is currently no real 802.1x support but there is already a releaded feature request. ⚓ T1466 Add EAPOL login support

As we now utilize wpa_supplicant also for MACsec it should not be too hard to port this over for 802.1x client support.

Hardcoded NA=1 and PD=2 are only utilized if temporary address is not selected or prefix-delegation is enabled. Those could be made configurable (⚓ T2677 Proposal for clearer DHCPv6-PD configuration options). We are more then happy for any contribution, the best thing would be discussion on Phabricator or “more realtime” via Slack.