I have one Router(first one in image), acted as CapMan, and 7 APs. All upgrade from 7.22.3 to 7.23.1
- download .npk files and upload to router
- restart router to let it upgrade to 7.23.1
- after router booted, and all CAP (still stay at 7.22.3) connected, CapMan will let CAP download 7.23.1 npk files and auto upgrade
- then all CAP rebooted and upgrade themself to 7.23.1
- after a while, IPv6 traffic were down: machines cannot ping outside via router and outside cannot ping inside via router.
Then I found in /ipv6/neighbor:
Flags: D - DYNAMIC; R - ROUTER
Columns: ADDRESS, MAC-ADDRESS, INTERFACE, VRF
# ADDRESS MAC-ADDRESS INTERFACE VRF
0 DR fe80::1 3C:A1:61:6C:E9:44 ether1 main
1 DR fe80::2ec8:1bff:fe4a:828f 2C:C8:1B:4A:82:8F bridge main
4 DR fe80::2ec8:1bff:fe4a:805b 2C:C8:1B:4A:80:5B bridge main
It means two CAPs from bridge sent IPv6 RA and router and other machines accepted. Router ipv6 route table was
Flags: D - DYNAMIC; X - DISABLED, I - INACTIVE, A - ACTIVE; c - CONNECT, s - STATIC, r - RIP, b - BGP, o - OSPF, i - IS-IS, d - DHCP, v - VPN, m - MODEM, g - SLAAC, y - BGP-MPLS-VPN;
H - HW-OFFLOADED; + - ECMP
DAg + dst-address=::/0 routing-table=main gateway=fe80::2ec8:1bff:fe4a:828f%bridge immediate-gw=fe80::2ec8:1bff:fe4a:828f%bridge distance=0 scope=30 target-scope=10
D v dst-address=::/0 routing-table=main gateway=pppoe immediate-gw=pppoe distance=1 scope=30 target-scope=10 vrf-interface=pppoe
DAg + dst-address=::/0 routing-table=main gateway=fe80::da86:8eff:fea1:37%pppoe immediate-gw=fe80::da86:8eff:fea1:37%pppoe distance=0 scope=30 target-scope=10
DAg + dst-address=::/0 routing-table=main gateway=fe80::2ec8:1bff:fe4a:805b%bridge immediate-gw=fe80::2ec8:1bff:fe4a:805b%bridge distance=0 scope=30 target-scope=10
So ipv6 traffic send to wrong gateways.
I don't know why CAPs send ipv6 RA. So I logined to every CAP and disable items under /ipv6/nd
Then everything works well.
I found 3 CAPs ipv6 enabled in (/ipv6/settings/print) while other CAPs are all disabled. So I also turn off ipv6 of all CAPs.
Anyone has better solution?
