IPv6 on public interface

[idelconsulting]

Dear all,

I'm ttrying to get IPv6 up and running but so far without much success.

My ISP assigend a /48 range to me and they are saying I need to use DHCP. AFAIK, DHCPv6 is not supported, but NDP is.

Assume my IPv6 prefix is

abcd:1234:5678::/48

So I enabled IPv6 on the public interface and set the interface IP  to

abcd:1234:5678::/48

Enabled Interface ID as Host, Anycast, RA

Also enabled router advertisements.

Something seems to be wrong as I'm getting:

An inconsistent router advertisement was received from address ...

Any idea how to debug that further?

Do I need to ask the ISP for the default gateway IPv6 address? For IPv4 I'm getting that via DHCP and added that as the default route to the VR. 

What also concerns me is that when I do a packet capture for IPv6, all the router advertisements appear in the received but also in the dropped logs.

Is there anything missing so that the RA packets actually reach the firewall?

Regards,

    Andreas

[idelconsulting]

My ISP confirmed that I need to use DHCPv6 with prefix delegation.

I suppose this is not supported by Palo Alto?

Regards,

   Andreas

[JimMcGrady]

If an ISP is using IPv6 with DHCP, what would the interface config and routing config look like on a Palo gateway?

[idelconsulting · Accepted solution]

PanOS 11 seems to add support for DHCPv6 with prefix delegation.

It now works as designed.