Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
04-18-2023 02:14 AM
Hi everyone,
I configured a PA440 as a DHCPv6 Client and a Fritzbox 3390 as the DHCPv6 Server (with IA_PD & IA_NA).
I also configured an inherited interface.
The configuration is the same as here: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/dhcpv6-client-...
I experienced some non deterministic issues after rebooting the DHCPv6 client (PA440).
Sometimes after a reboot, everything works just fine, the DHCPv6 client is in state "BOUND" and my host gets a GUA from the DHCPv6 client.
Sometimes after a reboot, the DHCPv6 client (PA440) is in state "BOUND" and the lease time gets renewed, but the host only gets a link-local address from the DHCPv6 client.
I attached pictures of both cases.
One time i experienced the behavior that the DHCPv6 client was stuck in the state "SOLICIT" and didn't get the config from the server after a Renew / Release (I captured that the DHCPv6 client wasn't even sending solicitations to the server).
The known issues page has similar bugs in the HA active / passive context (which I don't use).
Does anyone have the same problems or am I doing something fundamentally wrong?
thank you for any help.
04-23-2023 09:34 PM
Hi @JanHend ,
It looks like what you are experiencing is indicated by the known issues list. There appears to be a number of issues related to DHCP. 11.0.1 was recently release on March 30th and will likely be some time until a new update fixing the issues releases.
Are you currently running this in a PROD environment and which chassis do you have? Wondering if downgrading is an option if this is critical.
04-27-2023 11:33 PM
Hi @JayGolf,
thank you for your reply! I am testing IPv6 and its connection in our test environment.
The prefix-delegation feature was included in version 11.0.0. After your reply I downgraded the PA440 to version 11.0.0 but sadly the issues were the same.
Kind regards
Jan
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
