topic Re: PanOS 11.0.1 DHCPv6 issues after reboot in General Topics

PanOS 11.0.1 DHCPv6 issues after reboot

JanHend — Tue, 18 Apr 2023 09:14:23 GMT

Hi everyone,

I configured a PA440 as a DHCPv6 Client and a Fritzbox 3390 as the DHCPv6 Server (with IA_PD & IA_NA).

I also configured an inherited interface.

The configuration is the same as here: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/dhcpv6-client-with-prefix-delegation

I experienced some non deterministic issues after rebooting the DHCPv6 client (PA440).

Sometimes after a reboot, everything works just fine, the DHCPv6 client is in state "BOUND" and my host gets a GUA from the DHCPv6 client.

Sometimes after a reboot, the DHCPv6 client (PA440) is in state "BOUND" and the lease time gets renewed, but the host only gets a link-local address from the DHCPv6 client.

I attached pictures of both cases.

One time i experienced the behavior that the DHCPv6 client was stuck in the state "SOLICIT" and didn't get the config from the server after a Renew / Release (I captured that the DHCPv6 client wasn't even sending solicitations to the server).

The known issues page has similar bugs in the HA active / passive context (which I don't use).

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-release-notes/pan-os-11-0-1-known-and-addressed-issues/pan-os-11-0-1-known-issues

Does anyone have the same problems or am I doing something fundamentally wrong?

thank you for any help.

Re: PanOS 11.0.1 DHCPv6 issues after reboot

JayGolf — Mon, 24 Apr 2023 04:34:50 GMT

Hi @JanHend ,

It looks like what you are experiencing is indicated by the known issues list. There appears to be a number of issues related to DHCP. 11.0.1 was recently release on March 30th and will likely be some time until a new update fixing the issues releases.

Are you currently running this in a PROD environment and which chassis do you have? Wondering if downgrading is an option if this is critical.

Re: PanOS 11.0.1 DHCPv6 issues after reboot

JanHend — Fri, 28 Apr 2023 06:33:09 GMT

Hi @JayGolf,

thank you for your reply! I am testing IPv6 and its connection in our test environment.

The prefix-delegation feature was included in version 11.0.0. After your reply I downgraded the PA440 to version 11.0.0 but sadly the issues were the same.

Kind regards

Jan