Contents

Configure DHCPv6 Client Prefix Delegation

To configure a Firebox as a DHCPv6 client for prefix delegation, you can configure an external interface to request a delegated prefix from a DHCPv6 server. After you enable this for an external interface, you can use the delegated prefix to configure IPv6 addresses on the trusted, optional, and custom interfaces.

Enable DHCPv6 Client Prefix Delegation

To enable DHCPv6 prefix delegation in the IPv6 settings for an external interface:

  1. Edit the settings for an external interface.
  2. Select the IPv6 tab.
  3. Select Enable DHCPv6 Client Prefix Delegation.
  4. Select the Rapid Commit check box if you want to use a rapid two-message exchange to get an IPv6 prefix.

For more information about other IPv6 settings on an external interface, see Configure IPv6 for an External Interface.

Determine the Client DUID

The DHCP server your device connects to can delegate a prefix from a pool of prefixes, or it can reserve a specific prefix for your device. To reserve a prefix for your device, the DHCP server must know the DHCP unique identifier (DUID) of the external interface. The DHCP client uses a DUID based on the link-layer address. This DUID type, known as DUID-LL, is described in RFC 3315. For a Firebox, the DHCP client DUID is 00:03:00:01 plus the MAC address of the interface.

After you know the interface MAC address, combine 00:03:00:01 with the MAC address to determine the client DUID. For example, if the MAC address of the external interface is 00:90:7f:97:ad:95, the DUID for that interface is 00:03:00:01:00:90:7f:97:ad:95. Your DHCP service provider might ask you to provide the DUID so they can reserve a specific prefix for your device.

See the Delegated Prefix

After you enable client prefix delegation, the prefix assigned to your device appears in the Front Panel tab of Firebox System Manager.

To see the delegated prefix, from Firebox System Manager:

  1. Select the Front Panel tab
  2. Expand the Interfaces for your device.
  3. Expand the external interface.
  4. Expand the IPv6 Addresses.

It is important to know what prefix has been assigned to your device before you use the delegated prefix to configure IPv6 addresses on your network.

Use a Delegated Prefix

When prefix delegation is enabled, you can select the Use delegated prefix check box when you configure these IPv6 addresses for trusted, optional, and custom interfaces:

  • Static IPv6 address for an interface
  • IPv6 prefix advertisement
  • DHCPv6 server address pool
  • DHCPv6 server reserved addresses

When you select the Use delegated prefix check box, the delegated prefix name appears as the first part of the IP address.

The delegated prefix name begins with the external interface device name. For example, if you enable DHCPv6 client prefix delegation on interface 0, the delegated prefix name is eth0_prefix.

When you configure an IP address to use a delegated prefix, you select the prefix name, and then specify a subnet and a routing prefix length. To generate a valid IP address with a delegated prefix, the configured prefix length must be longer than the delegated prefix length.

IP Address Generation with a Delegated Prefix

Before you use a delegated prefix, it is important to understand how the delegated prefix is used as part of your IP address. These two examples show how Fireware uses the delegated prefix to generate a complete IPv6 address for a static interface IP address.

Avoid Duplicate IP Addresses

When you use a delegated prefix, make sure that you specify subnets and prefix lengths that result in unique IPv6 addresses within your configuration when the delegated prefix is applied. Be careful to avoid these invalid address configurations:

  • Interfaces with the same IPv6 address or an IPv6 address on the same subnet
  • Router advertisements with the same prefix
  • DHCPv6 servers that use the same IP address pool

Use a Delegated Prefix in a Static IPv6 Address

After you enable prefix delegation for an external interface, you can use the delegated prefix when you enable IPv6 and configure a static IPv6 address for a trusted, optional, or custom interface.

Use a Delegated Prefix in a Prefix Advertisement

You can use a delegated prefix when you add a prefix advertisement. If you use a delegated prefix for a static IPv6 address, and you select the Add Prefix Advertisement check box for that static IPv6 address, a prefix advertisement is added that also uses the delegated prefix.

Use a Delegated Prefix in the DHCPv6 Server Configuration

You can use a delegated prefix when you configure addresses for the DHCPv6 server for a trusted, optional, or custom interface. In the DHCPv6 server configuration you can use the delegated prefix for addresses to the IP address pool and reserved IP addresses. The Use delegated prefix check box appears in the IPv6 configuration settings for a trusted, optional, or external interface only after you enable DHCPv6 client prefix delegation on an external interface.

You can use the delegated prefix when you add entries to the DHCPv6 address pool.

You can use the delegated prefix when you configure reserved IPv6 addresses.

See Also

About DHCPv6 Prefix Delegation

Give Us Feedback  ●   Get Support  ●   All Product Documentation  ●   Technical Search