Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

DHCPV6 server drops packets due to authentication

$
0
0

 

I have set up a dhcpv6 client and server on an srx240 connected to a Comcast modem via ge-3/0/0. 

I have enabled ipv6 flow mode and allowed dhcpv6 in the security zone.

 

 

ge-3/0/0 {
    unit 0 {
        description "untrust ethernet";
        family inet6 {
            dhcpv6-client {
                client-type statefull;
                client-ia-type ia-pd;
                client-ia-type ia-na;
                client-identifier duid-type duid-ll;
                update-server;
            }
        }
    }
}

 

dhcp-local-server {
    dhcpv6 {
        overrides {
            interface-client-limit 10;
        }
        group IPV6 {
            interface vlan.0;
        }
    }
}

 

address-assignment {
    pool IPV6 {
        family inet6 {
            prefix 2601:248:4500:d3dc::/64;
            range IPV6-RANGE {
                low 2601:248:4500:d3dc::100/128;
                high 2601:248:4500:d3dc::109/128;
            }
            dhcp-attributes {
                propagate-settings ge-3/0/0.0;
            }
        }
    }
}

 

 

I get a prefix delegation from Comcast.

 

root@srx240> show dhcpv6 client binding detail

Client Interface: ge-3/0/0.0
Hardware Address: 78:19:f7:16:84:cb
State: BOUND(DHCPV6_CLIENT_STATE_BOUND)
ClientType: STATEFUL
Lease Expires: 2016-03-10 07:58:41 CST
Lease Expires in: 337782 seconds
Lease Start: 2016-03-06 09:54:17 CST
Bind Type: IA_NA IA_PD
Client DUID: LL0x3-78:19:f7:16:84:cb
Rapid Commit: Off
Server Ip Address: fe80::201:5cff:fe68:7446
Update Server Yes
Client IP Address: 2001:558:6033:43:2cf6:4146:af5d:2f84/128
Client IP Prefix: 2601:248:4500:d3dc::/64

 

DHCP options:
Name: server-identifier, Value: LL_TIME0x1-0x1c682253-40:a8:f0:26:f0:d4

 

 

However, dhcpv6 solicite requests are dropped by the server.

 

root@srx240> show dhcpv6 server statistics
Dhcpv6 Packets dropped:
Total 24
Authentication 24

Messages received:
DHCPV6_DECLINE 0
DHCPV6_SOLICIT 24
DHCPV6_INFORMATION_REQUEST 0
DHCPV6_RELEASE 0
DHCPV6_REQUEST 0
DHCPV6_CONFIRM 0
DHCPV6_RENEW 0
DHCPV6_REBIND 0
DHCPV6_RELAY_FORW 0
DHCPV6_RELAY_REPL 0

Messages sent:
DHCPV6_ADVERTISE 0
DHCPV6_REPLY 0
DHCPV6_RECONFIGURE 0
DHCPV6_RELAY_REPL 0

 

 

I am pretty new at this and not sure how to proceed to get the dhcpv6 server working.  Any help would be greatly appreciated.

 Thanks.

 


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>