Specify IAAD for DHCPv6

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Specify IAAD for DHCPv6

L0 Member

Hi,

 

I'm in the process of implementing a PA VM with full IPv6 on a Danish ISP. In order to get the /48 IPv6 prefix that they offer, I need to request it using a DHCPv6 client. However, it seems the ISP requires the DHCP request for prefix delegation to have IAID of 1.

 

This works fine when testing with a linux running dhcp6c, where I can manually specify the IAID for PD and a NA address:

18:07:00.455099 IP6 (flowlabel 0x986ba, hlim 1, next-header UDP (17) payload length: 68) fe80::201:2eff:fe35:33a5.546 > ff02::1:2.547: [bad udp cksum 0x60b7 -> 0x20c3!] dhcp6 solicit (xid=e79e6c (client-ID hwaddr/time type 1 time 569859247 00133b131f8b) (IA_NA IAID:1 T1:0 T2:0) (elapsed-time 65535) (IA_PD IAID:1 T1:0 T2:0))

 

However, when the PA VM does the same, it sets it's own unique IAID:

09:02:59.755902 IP6 (hlim 1, next-header UDP (17) payload length: 105) fe80::5054:ff:fe71:165c.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=edef2f (client-ID hwaddr/time type 1 time 775465371 52540071165c) (option-request DNS-server DNS-search-list) (elapsed-time 0) (IA_NA IAID:50397201 T1:3600 T2:5400) (IA_PD IAID:419495953 T1:3600 T2:5400 (IA_PD-prefix ::/48 pltime:0 vltime:0)))

 

I can't find anywhere in the GUI/CLI where this is configurable. Is there any way to specify the IAID when using the DHCPv6 client option in PA? Unfortunately, this seems to be the only way this ISP allows me to request the /48 prefix.

1 REPLY 1

L4 Transporter

Hi @JannikRuusBjerg 

You only specify the following parameters

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/dhcpv6-client-...

 

PCSPI, PCNSCx3,PCNSEx4,, PCSAE,PCDRA, ISC2 CC
  • 102 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!