Operating System: All
Platform: All

Attachment simplePOCfiles.tar has been added with description: Utilities for POC including ones changed for IPv6 testing

Can pass L2 traffic using the POC with a modified DestinationMapper (changes flow-mod so that it matches the L2 flow instead of the L3 flow, which was decrementing the TTL, causing the host to drop the Neighbor Advertisement).

Can't pass L3 traffic due to no handling of IPv6 Router Solicit messaging.

This Google Doc captures the state of IPv6 support needed for Group Based Policy:

https://docs.google.com/document/d/1AU3erz2KCunK6bOU3Nq9bH7wk-6vJrgc9pFARiGmm7c/edit?usp=sharing

Minor change required to routing to stop TTL-.

Can use dMAC==matcherMac for this purpose.

Bigger issues are around (and thanks to Rob Adams readams for the pointers)

"responses to router and neighbor solicitations for the router are handled through packet-in/packet-out (actually we use the nicira extension version of packet-out since that lets us see the register values set for the packet which makes it so the controller can be simpler). I'm not sure how easy that is to handle with the ODL openflow plugin. Luckily nearly all the original GBP code already supported ipv6 except for a few corner cases.

You will also need to deal with router advertisements that need to be sent periodically from the virtual router to any endpoints that are members of a given subnet. You can see that code in the AdvertManager.cpp file in the agent (you won't need to worry about the endpoint advertisements, just the router advertisements). There's a lot of fiddly bits here dealing with various flags that enable or disable stateless autoconfiguration, dhcpv6, etc. The agent only supports a subset of all that.

You'll also need to update the port security table to allow neighbor discovery and dhcpv6 to work correctly.
"