Products Firewalla Gold SE Firewalla Gold Pro Firewalla Gold Plus Firewalla Orange Firewalla Purple SE Firewalla Wi-Fi SD Product Comparison Product Reviews

Ting stateful DHCPv6 PD

Follow
Avatar
Joel Pinnow
I have Ting Internet with DHCPv6 PD. I get lease time of 0 minutes and no sticky IPv6 WAN IP (only link local). Ting sent me the following about stateful DHCPv6. Any ideas why this isn’t working? Ting engineers stated the following. To make sure the FW is configured for stateful dhcpv6. here's a sample juniper config for reference set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client client-type stateful set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client client-ia-type ia-pd set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client client-ia-type ia-na set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client client-identifier duid-type duid-ll set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client update-router-advertisement interface irb.100 set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client update-server In the meantime we have cleared the BNG/KEA session, the ONT was powered off currently when this was done, but recommended to check your stateful config and re-dhcp again when able. Also per some research evidently Firewalla does not currently support configuring fully stateful DHCPv6 through the app GUI. Instead, Firewalla uses SLAAC (Stateless Address Autoconfiguration) or Stateless DHCPv6 for IP provisioning. From our side the BNG is correctly using IANA and IAPD for your session. —— My response: This is my DHCPv6 config file on Linux shell for Firewalla. pi@Firewalla:~/.router/config/dhcpcd6 (Firewalla) $ cat eth0.conf # A sample configuration for dhcpcd. # See dhcpcd.conf(5) for details. # Allow users of this group to interact with dhcpcd via the control socket. #controlgroup wheel # Inform the DHCP server of our hostname for DDNS. hostname # Use the hardware address of the interface for the Client ID. #clientid # or # Use the same DUID + IAID as set in DHCPv6 for DHCPv4 ClientID as per RFC4361. # Some non-RFC compliant DHCP servers do not reply with this set. # In this case, comment out duid and enable clientid above. duid # Persist interface configuration when dhcpcd exits. persistent # do not automatically install default route, it will be handled by hook script nogateway # Rapid commit support. # Safe to enable by default because it requires the equivalent option set # on the server to actually work. option rapid_commit # A list of options to request from the DHCP server. option domain_name_servers, domain_name, domain_search option classless_static_routes # Most distributions have NTP support. option ntp_servers # Respect the network MTU. This is applied to DHCP routes. option interface_mtu # 40712 is the private enterprise number (PEN) of DHCPCD Project, some DHCPv6 server won't respond if vendor class data is not specified vendclass 40712 "dhcpcd:Linux-Firewalla" # A ServerID is required by RFC2131. require dhcp_server_identifier # Generate Stable Private IPv6 Addresses instead of hardware based ones #slaac private # Dummy prefix delegation entry to simply get prefix to delegate without configuring any interface, evil! ia_pd 1/::/56 not_exist/1 ia_na pi@Firewalla:~/.router/config/dhcpcd6 (Firewalla) $
0

Comments

2 comments

Sort by Date Votes
  • Avatar
    Firewalla CM

    Hi Joel Pinnow, sorry, but is it possible to reformat this to a more readable format?

    As for DHCPv6, if your ISP requires a specific DUID Type, it is possible to adjust this in the Firewalla App: https://help.firewalla.com/hc/en-us/articles/360046703673-Firewalla-Feature-Guide-Network-Manager#h_01K9B6GCFAAS467P7FJKYRMTDS

    0
    Comment actions Permalink
  • Avatar
    Joel Pinnow

    Sorry, originally pasted via my phone...

     

    Ting engineers stated the following.

     

    To make sure the FW is configured for stateful dhcpv6.  here's a sample juniper config for reference

    set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client client-type stateful
set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client client-ia-type ia-pd
set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client client-ia-type ia-na
set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client client-identifier duid-type duid-ll
set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client update-router-advertisement interface irb.100
set interfaces ge-0/0/0 unit 0 family inet6 dhcpv6-client update-server

    In the meantime we have cleared the BNG/KEA session, the ONT was powered off currently when this was done, but recommended to check your stateful config and re-dhcp again when able.

    Also per some research evidently Firewalla does not currently support configuring fully stateful DHCPv6  through the app GUI. Instead, Firewalla uses SLAAC (Stateless Address Autoconfiguration) or Stateless DHCPv6 for IP provisioning.

     

    From our side the BNG is correctly using IANA and IAPD for your session.

     

     

    My config file:

     

    pi@Firewalla:~/.router/config/dhcpcd6 (Firewalla) $ cat eth0.conf
    # A sample configuration for dhcpcd.
    # See dhcpcd.conf(5) for details.

    # Allow users of this group to interact with dhcpcd via the control socket.
    #controlgroup wheel

    # Inform the DHCP server of our hostname for DDNS.
    hostname

    # Use the hardware address of the interface for the Client ID.
    #clientid
    # or
    # Use the same DUID + IAID as set in DHCPv6 for DHCPv4 ClientID as per RFC4361.
    # Some non-RFC compliant DHCP servers do not reply with this set.
    # In this case, comment out duid and enable clientid above.
    duid

    # Persist interface configuration when dhcpcd exits.
    persistent

    # do not automatically install default route, it will be handled by hook script
    nogateway

    # Rapid commit support.
    # Safe to enable by default because it requires the equivalent option set
    # on the server to actually work.
    option rapid_commit

    # A list of options to request from the DHCP server.
    option domain_name_servers, domain_name, domain_search
    option classless_static_routes
    # Most distributions have NTP support.
    option ntp_servers
    # Respect the network MTU. This is applied to DHCP routes.
    option interface_mtu

    # 40712 is the private enterprise number (PEN) of DHCPCD Project, some DHCPv6 server won't respond if vendor class data is not specified
    vendclass 40712 "dhcpcd:Linux-Firewalla"

    # A ServerID is required by RFC2131.
    require dhcp_server_identifier

    # Generate Stable Private IPv6 Addresses instead of hardware based ones
    #slaac private

    # Dummy prefix delegation entry to simply get prefix to delegate without configuring any interface, evil!
    ia_pd 1/::/56 not_exist/1

    ia_na
    pi@Firewalla:~/.router/config/dhcpcd6 (Firewalla) $

     

    0
    Comment actions Permalink

Please sign in to leave a comment.

Didn't find what you were looking for?

New post