Testing Done: |
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Diff: |
Revision 2 (+9 -5) |
Bug 681 - IPv6 interface IP address gets removed after reboot of vAPV |AS-12497| CBI
Review Request #314 — Created July 8, 2024 and submitted
| Information | |
|---|---|
| kdutta | |
| APV10 | |
| rel_apv_10_7 | |
| 681 | |
| Reviewers | |
| prajesh, tanya | |
Bug 681 - IPv6 interface IP address gets removed after reboot of vAPV |AS-12497| CBI
Add below configuration to reproduce
DR-ARRAY-INT-LLB-2#show version
ArrayOS Rel.APV.10.7.0.6 - untagged unofficial build by uid=0(root) gid=0(root) groups=0(root) on DevAnsuk: on Sun Jul 7 23:53:27 2024
Host name : DR-ARRAY-INT-LLB-2 System CPU : Intel(R) Xeon(R) CPU System RAM : 16264692 kbytes.System boot time : Mon Jul 08 05:58:45 GMT (+0000) 2024
Current time : Mon Jul 08 06:01:28 GMT (+0000) 2024
System up time : 3 mins, 13 secs
Platform Bld Date : Mon Jul 08 05:52:57 GMT 2024
SSL HW : No HW Available
Compression HW : No HW Available
Network Interface : 1 x Gigabit Ethernet copper
2 x 10Gigabit Ethernet fiber
Model : Array AVX vAPV
Serial Number : 0D281A6974A5007716077340152430
Licensed Limits : Bandwidth(100 Gbps)
Licensed Features : WebWall Clustering L4SLB L7SLB Caching
SSL tProxy SwCompression LLB GSLB QoS
MultiLang DynRoute IPv6 WAF
License Key : f0480ee1-baf2e6d6-60c468b3-62a295c0-9d28f8f2-6300c680-2455d8ab-20240604-99999999Array Networks Customer Support
Telephone : 1-877-992-7729 (1-877-99-ARRAY)
Email : support@arraynetworks.com
Update : please contact support for instructions
Website : http://www.arraynetworks.comOther Root Version
Rel.APV.10.7.0.13 build on Thu Feb 29 05:22:00 2024DR-ARRAY-INT-LLB-2#sh run
version Rel.APV.10.7.0.6
system command configuration
system command timeout 120
system command override onadmin aaa configuration
admin aaa on 0
admin aaa authorize on
admin aaa method TAC_Xhostname configuration
hostname "DR-ARRAY-INT-LLB-2"
config timeout 180switch configuration
system timezone configuration
system timezone "GMT"
global users in config mode configuration
config multiconfig disable
rts configuration
ip rts off
ip rts expire 60interface configuration
interface name "port1" "port1"
interface name "port2" "SIFY"
interface name "port3" "TCL"
interface speed "port1" 10half
interface speed "port2" auto
interface speed "port3" auto
interface bandwidthtimer 300interface configuration
interface name "port1" "port1"
interface name "port2" "SIFY"
interface name "port3" "TCL"
interface speed "port1" auto
interface speed "port2" auto
interface speed "port3" auto
interface bandwidthtimer 300interface mac
bond configuration
dhcp configuration
ip configuration
ip address "port1" 192.168.10.89 255.255.255.0
ip address "SIFY" 172.20.0.1 255.255.0.0
ip address "SIFY" 2001:db8:1:3::10 65interface management
ip host configuration
support ip configuration
support 0.0.0.0 0.0.0.0
vlan configuration
segment basic configuration
segment mnet configuration
mnet configuration
vxlan basic configuration
vxlan disable
vxlan port 4789
vxlan mode p2mp
vxlan learn onvxlan forwarding configuration
overlap interface configuration
bond hc configuration
interface mtu
interface mtu port1 1500
interface mtu port2 1500
interface mtu port3 1500
interface mtu bond1 1500
interface mtu bond2 1500
interface mtu bond3 1500
interface mtu bond4 1500
interface mtu bond5 1500
interface mtu bond6 1500
interface mtu bond7 1500
interface mtu bond8 1500interface description
interface promisc
ip arp configuration
ipv6 ndp configuration
ipgroup configuration
extended routing policies
ip ipflow off
ip ipflow priority 1000
ip ipflow expire 60ipregion route configuration
route configuration
ip statistics configuration
ip statistics off
link load balancing configuration
llb link health remote disable
llb method outbound rr
llb method inbound rr
llb link statistics on
llb link bw_priority 1800
llb link health on
llb rsite health offlink load balancing DNS configuration
link load balancing DNS proxy configuration
llb dnsproxy off
smart DNS configuration
sdns off
sdns recursion off
sdns fulldns on
sdns sync status 3 2
sdns sync config runtime off
sdns statistics query on
sdns statistics localdns on
sdns edns ecs off
sdns dnssec off
sdns dps off
sdns dps interval query 1200
sdns dps method rtt
sdns dps expire 1500
sdns dps interval send 120dns whitelist configuration
DPI configuration
dpi off
access list and webwall configuration
synconfig challenge configuration
synconfig secure configuration
synconfig configuration
cluster configuration
cluster virtual ffo off
cluster virtual ffo interface carrier loss timeout 1000
cluster virtual arp interval 60
cluster virtual discreet offha group configuration
monitor system configuration
monitor system on
monitor system ssl ae 60 5000 3 3
monitor system ssl se 60 5000 3 3
monitor system disk system 60 60
monitor system disk data 80 60ip pool configuration
nameserver configuration
password setting
passwd forcemode on
passwd expire onenable password
passwd enable "XXXXXXXXXsaFLGt/QKS6yw"
user configuration
user "array" "XXXXXXXXX$6$BfK3dM9nEj25v42b$dUstxrGl/oWzCCy7BE.qG/r7tOgbkj6gjHulC7HItokk9f2yx1XiiDjWTtoqhMPduydwmKy5Rp0VnumsA4Aua." "config"
admin mode separation configuration
admin mode separation off
RoleBase configuration
restful api configuration
restapi off
restapi ssl settings clientauth disable
restapi ssl settings authmandatory enable
restapi ssl settings ciphersuites "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-GCM-SHA384"
restapi ssl settings protocol "TLSv12"webui configuration
webui port 8888
webui graph off
webui graph refresh 10
webui idletimeout 15
webui hostcheck on
webui ssl settings clientauth disable
webui ssl settings authmandatory enable
webui ssl settings ciphersuites "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-GCM-SHA384"
webui ssl settings protocol "TLSv12"
webui on
webui twofactor off "array"webui language configuration
webui language en
activationserver configuration
ip license server configuration
xmlrpc configuration
xmlrpc off
xmlrpc port 9999
xmlrpc authentication offsnmp configuration
snmp community "public"
snmp contact ""
snmp location ""
no snmp enable traps
snmp traps loglevel err
snmp ipcontrol off
snmp offntp configuration
ntp off
system mail configuration
system mail from "%halert@log.domain"
system mail hostname "%l.alert_pseudo_domain" 0
system mail external offsystem mail relay configuration
system mail relay off
tune configuration
system tune rxmode poll 100
system tune hwcksum on
system tune tcpidle 300
system tune tlsidle 300
system tune tcp retransmit timeout 1000
system tune tcp retransmit dupacks 3
system tune tcp retransmit accelerate off
system tune tcp delack count 4
system tune tcp delack timeout 100
system tune tcp slowstart on
system tune tcp syntimeout 60
system tune tcp timewait 50
system tune tcp zwdefend off
system tune tcp pktdropopt 2
system tune route numaaccel off
system tune ip randomid off
system tune tcp rmem_max 131072
system tune tcp syncache off
system tune tcp option sack off
system tune tcp option timestamp off
system tune tcp option wscale off
system tune tcp tso off
system tune tcp finacc on
system tune pollactivity 64
system tune dispatcher sipudp off
system tune dispatcher epolicy off
system tune arp timeout 3600
system tune ndp timeout 86400
system tune icmp replylimit 1000dump flag when panic
system dump on
system interactive configuration
system interactive off
system useaccess configuration
system usbaccess off
webclassify configuration
webclassify settings
webclassify off
webclassify cloud offport forwarding configuration
fwd mode transparent
slb configuration
slb virtual health off
default policy order template:
qos-clientport 1
qos-network 2
pu 3
rc 4
ic 5
pc 6
qos-cookie 7
qos-hostname 8
qos-url 9
qos-body 10
qos-dnsdomain 11
qos-dnsqtype 12
regex 13
header 14
hu 15
slb directfwd off
slb directfwd syncache off
slb directfwd statistics on
slb mode ircookie plainname
slb mode icookie always
slb mode activeclose off
slb mode keepport off
slb ftps datachannel 0
slb ftp datachannel 20
slb tuxedo portposition 78
slb mode regexcase off
slb overload persistence off
slb sip persistence timeout 120fastlog configuration
log facility "local0"
log level "info"
log off
log language english
log message disable 100017001
log message disable 100017002
log message disable 100017003
log message disable 100017004
log message disable 100017005
log message disable 100017006
log message disable 100024013
log message disable 100024014
log source port 514
log option levelinfo off
log option logid off
log localhost off
log http squid
log rfc5424 off
log appvisual off ssl
log appvisual off sdns
log appvisual off slb-http
log appvisual off slb-tcp
log appvisual off llbwebagent configuration
webagent dns configuration
webagent dns cache off
webagent dns cache expire 60 3600webagent acl configuration
ssh configuration
ssh on
ssh auth passwd on "array"
ssh auth key off "array"
ssh kex "curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521"
ssh port 22
ssh cipher "aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com"
ssh idletimeout 30advance acl configuration
advance dns acl configuration
advance http acl configuration
advance blacklist acl configuration
acl blacklist off
ddos configuration
DDOS user setting:
TopN configuration
topn off ip
topn off tcp
topn off udp
topn off icmpaaa configuration
aaa session configuration
aaa sso configuration
ftp passive configuration
proxy cache configuration
cache off
cache settings expire "82800"
cache settings objectsize 5120cache channel statistic configuration
http modifyheader configuration
http modifyheader keepalive off
filter configuration
filter request controlchar configuration
It works only when filter vip setting is configured.
filter request controlchar on
http error page configuration
http compression configuration
http compression off
cache imageoptimizer configuration
cache imgopt off
cache imgopt sizelimit 1
cache imgopt format jpeghttp waf configuration
waf log audit on
http rewrite configuration
http rewrite body off
http rewrite body limit 5120
http rewrite body mimetype html
http rewrite body statuscode 200
http rewrite response cookie secure off
http rewrite response cookie secure icookie on
http rewrite response cookie samesite on
http rewrite response cachecontrol offhttp configuration
http xforwardedfor off
http xurlencode common
http owa off
http xclientcert header "X-Client-Cert: "
http xciphersuite header "X-Client-Ciphersuite: "
http serverpersist on
http serverconnreuse on
http serverconnreuse maxreq 0
http serverconnreuse timeout 180
http connsplice off
http connkeep off
http mask server off
http mask via off
http shuntreset off
system mode reversediameter configuration
diameter server timeout 0 0
diameter reliable off
diameter mark server offSIP configuration
sip multiregistration configuration
sip multireg off
nat configuration
nat pureip off
nat itcpopt offIPv6 DNS64 configuration
ipv6 dns64 prefix 64:ff9b::
ipv6 nat64 prefix 64:ff9b::
ipv6 nat64 timeout 300
ipv6 dnsnat46 timeout 300
ipv6 dns64 off
ipv6 nat64 off
ipv6 dnsnat46 off
ipv6 tune dnsnat priority time 100
ipv6 tune dnsnat response timeout 5000health check configuration
health interval 5 5
health on
health earlywarning 0
health failover disable
health failover retries 3
health l2slb route off
health proxyip off
health reliable on
health passive offHSM autologin configuration
ssl configuration
ssli settings
ssli settings certcache timeout 1800
ssl global settings
ssl globals verifycert on
ssl globals ignoreclosenotify on
ssl globals ems off
ssl globals sendclosenotify on
ssl globals sessiontimeout 1800
ssl globals renegotiation off
ssl globals serialnumber upper
ssl gmsdf failover off
ssl globals fastcrl off
ssl globals protocol virtual "TLSv12"
ssl globals protocol real "TLSv1:TLSv11:TLSv12"
ssl globals certexpdays 60
ssl globals statistics handshake off
ssl globals certchkinterval 1440ssl global error page settings
ssl host settings
ssli domainlist off
graph configuration
slb dns cache configuration
dns cache off
dns cache expire 60 3600cache filter configuration
cache filter off
Qos configuration
segment configuration
segment disable
rip configuration
rip off
ripng configuration
ripng off
ospf configuration
ospf off
ospf rhi offipv6 ospf configuration
ipv6 ospf off
bgp configuration
bgp off
crontab configuration
crontab disable
system ha configuration
ha ssi off
ha log off
ha log level info
ha arp interval 30
ha link ffo off
ha link network on
ha link ffo heartbeat off
ha floatmac off
ha consistency on
ha checkpeer on
ha synconfig bootup off
ha synconfig runtime off
ha heartbeat 1000 15
ha off
ha ssf off
ha ssf off nat
ha ssf timeout 300epolicy configuration
debug monitor configuration
debug monitor on SSL
debug monitor on SLB
debug monitor on UPROXY
debug monitor on ORCHbridge configuration
spanport configuration
system motd configuration
system motd disable
segment user configuration
role user configuration
lldp configuration
lldp off
lldp max_neighbors 32
lldp transmit_delay 30
lldp sysname "DR-ARRAY-INT-LLB-2"ipgroup address configuration
no default user configuration
interface shutdown
orchestrator configuration
orchestrator health on
DR-ARRAY-INT-LLB-2#
