# cat /etc/redhat-release Fedora release 26 (Twenty Six) # ip token set ::DEAD:BABE:BEEF:CAFE/64 dev devName # vi /etc/sysconfig/network-scripts/ifcfg-devName IPV6_PRIVACY=yes [or] IPV6_PRIVACY=rfc4941 # vi /etc/sysctl.d/99-sysctl.conf net.ipv6.conf.all.use_tempaddr=2 net.ipv6.conf.default.use_tempaddr=2 # vi /etc/NetworkManager/NetworkManager.conf [connection] ipv6.ip6-privacy=2 # ip address flush dev devName # reboot
a random ipv6 address is generated but so is the EUI-64 global and link local address based on my government Mandated Anonymity Cracking address (a.k.a. MAC address)
if I change the MAC address in the config file to something random
# vi /etc/sysconfig/network-scripts/ifcfg-devName HWADDR=00:12:34:56:78:9A
It still generates a random ipv6 address but the other ipv6 address is static and never changes but at least it isn't based on any MAC address (including the one specified above).
How do I enable rfc4941 random temporary addresses while disabling EUI-64 addresses? New addresses are supposed to be generated at least once a day and on reboot... what setting am I missing?