From: Zack Newman <zack@philomathiclife.com>
Subject: Re: add source link-layer address option to rad(8)
To: tech@openbsd.org
Date: Sat, 11 May 2024 14:07:39 -0600

Thank you so much for finding this out. I'm ashamed I did not delve
into the problem like you have. I incorrectly assumed it was an iOS
issue and didn't even bother posting on @bugs.

To expand on my issue, I am connected to an Aruba AP 655 with a
WPA3-based SSID (_not_ in transition mode) on all three radios (i.e.,
6 GHz, 5 GHz, and 2.4 GHz). The phone connects to the SSID just fine but
does not show the Wi-Fi icon nor can talk over the network. In my case I
don't even have a DHCP server (e.g., dhcpd(8)), instead I use static
IPv4 addresses. Like you, I have DNS information being sent:

router$ cat /etc/rad.conf
other configuration no
router lifetime 4294967295
dns {
	lifetime 4294967295
	nameserver fdb5:d87:ae42:1::1
	search philomathiclife.com
}
interface vlan0 {
	no auto prefix
	prefix fdb5:d87:ae42:1::/64 {
		preferred lifetime 4294967295
		valid lifetime 4294967295
	}
}
interface vlan3 {
	no auto prefix
	prefix 2601:283:4e80:3413::/64 {
		preferred lifetime 4294967295
		valid lifetime 4294967295
	}
}
interface vlan4 {
	no auto prefix
	prefix 2601:283:4e80:3414::/64 {
		preferred lifetime 4294967295
		valid lifetime 4294967295
	}
}
interface vlan5 {
	no auto prefix
	prefix 2601:283:4e80:3415::/64 {
		preferred lifetime 4294967295
		valid lifetime 4294967295
	}
}
interface vlan9 {
	no auto prefix
	prefix 2601:283:4e80:3410::/64 {
		preferred lifetime 4294967295
		valid lifetime 4294967295
	}
}

Anyway, when not relying on DHCP, the issue is far more annoying as the
only fix is to connect before rad(8) is running. When DHCP is used,
then I simply need to reconnect to the network. The issue only happens
after a reboot which makes the issue far less annoying and is probably
the main reason I never bothered to look into it further or post on
@bugs since I rarely reboot my phone.

What is interesting is that while my phone seems to not talk over the
network, it _does_ send ICMPv6/ICMP Echo replies in response to Echo
requests.

Anyway, you're a rock star. Thanks again.

P.S. the /60 I get from my ISP is practically static, so that is why
I use very large lifetimes.