[openib-general] IPv6oIB neighbour discover broken when MCGs overflow

Roland Dreier rdreier at cisco.com
Fri Feb 16 10:10:55 PST 2007


 > > But what if the full-member join fails on node A for node A's
 > > solicited node group, but then node B succeeds in joining that group
 > > as a send-only member (perhaps because some other nodes have dropped
 > > off the fabric in the meantime).  Then node B will send the ND message
 > > on a MCG that A is not a member of.

 > Yes. B can send ND to A, and A responds without being a member so IPv6 ND
 > works. Is there any security or other problems here?

Node A is not a member of the group B is sending on, so SM does not
have to set up any routes for the messages to even reach node A.  So
it doesn't see the messages and doesn't respond to ND.

 - R.




More information about the general mailing list