topic Re: PAN OS 11 and DHCPv6 with Prefix Delegation in General Topics

PAN OS 11 and DHCPv6 with Prefix Delegation

Chaz.Klinkbeil — Wed, 17 Jan 2024 15:09:09 GMT

I wanted to make sure I had the settings correct for configuring DHCPv6 on my WAN interface for Starlink. I can confirm that I did get an allocation of IPv6 addressing with a /56 prefix and was successfully able to get an IPv6 address assigned to my internal interface.

The issue is, it appears I have not gotten an actual perm or temp address on my WAN interface, although I did get a Prefix delegation? I did accept the RA on the external side, but no actual route was placed into the routing table yet.

Would this be an issue on ISP side? or my side? I believe it to be on the ISP side, but I could be wrong.

Re: PAN OS 11 and DHCPv6 with Prefix Delegation

Chaz.Klinkbeil — Fri, 19 Jan 2024 15:06:51 GMT

I figured it out. WAN interface will not get its own IPv6 address...just had to put the link local default route in and then everything started working. SLAAC was working with internal clients as well.

Re: PAN OS 11 and DHCPv6 with Prefix Delegation

MT-Infra — Fri, 31 Jan 2025 12:23:36 GMT

Thanks for the solution, this was the last piece of the puzzle to get IPv6 working 👏

Got the link local IPv6 IP from the WAN interface with command "show interface all" and made this static route:

Re: PAN OS 11 and DHCPv6 with Prefix Delegation

Mike_Hutchinson — Mon, 09 Feb 2026 16:16:43 GMT

So does this mean I will never see an ipv6 on the WAN interface when it faces starlink?
I'm asking because I am trying to set up globalprotect behind starlink via ipv6, and it appears I cannot due to no ipv6 assigned to this interface.

Re: PAN OS 11 and DHCPv6 with Prefix Delegation

MT-Infra — Tue, 10 Feb 2026 07:30:31 GMT

@Mike_Hutchinson For Globalprotect you can use the interface you've selected for prefix delegation. In my case this interface has a valid ipv6 address. (CLI: show interface all)

Re: PAN OS 11 and DHCPv6 with Prefix Delegation

Chaz.Klinkbeil — Wed, 11 Feb 2026 04:06:01 GMT

yeah, I ended up not using the IPv6 addresses as literally nobody uses it outside of some corporations and mobile devices...etc...... In order to actually get to that IPv6 address, the source users would have to have it also implemented and used.