Commit Failure Enabling DHCPv6 Prefix Delegation

MeCJay12 — Tue, 04 Mar 2025 21:33:56 GMT

Hello! I have a Panorama running 11.2.2-h1 managing an A/P HA pair of VM firewalls running 11.1.6-h3. I'm trying to configure the firewalls' interfaces to configured their IPv6 addresses based on a prefix delegated by the ISP on the WAN + a ULA address. I'm running into the below commit validation error on the Panorama (not even making it to the firewall). I've attached some SS of my config. What am I doing wrong here? What can I do to troubleshoot? I've already tried disabling everything on the sub-interface (DPD, NDP monitoring, RAs, DNS, IPv6 entirely) one at a time without any luck. I also tried disabling LLDP on the parent interface

Validation Error:
devices -> localhost.localdomain -> template-stack -> Lab_Stack -> config -> devices -> localhost.localdomain -> network -> interface -> ethernet -> ethernet1/4 -> layer3 -> units -> ethernet1/4.2 -> ipv6 -> inherited constraints failed : Inherited Interface, cannot have Static IPv6 Neighbor Discovery settings
devices -> localhost.localdomain -> template-stack -> Lab_Stack -> config -> devices -> localhost.localdomain -> network -> interface -> ethernet -> ethernet1/4 -> layer3 -> units -> ethernet1/4.2 -> ipv6 -> inherited is invalid

Re: Commit Failure Enabling DHCPv6 Prefix Delegation

MeCJay12 — Wed, 05 Mar 2025 04:14:39 GMT

One update, I think I'm running into a bug. I noticed that if I configure the WAN interface as a DHCPv6 client and save it, the next time I come back it's showing the IPv6 config as static. I don't see this in the known issues. I'm going to try 11.2.2-h2 then maybe 11.1.6-h3.

topic Commit Failure Enabling DHCPv6 Prefix Delegation in VM-Series in the Private Cloud

Commit Failure Enabling DHCPv6 Prefix Delegation

Re: Commit Failure Enabling DHCPv6 Prefix Delegation