This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

It would be nice if DHCP IPv6 issued IP addresses based on MAC instead of DUID

I am running a dual stack network at home.  I issue specific IP addresses to the servers for obvious reasons.  In IPv4 DHCP it issues IP addresses based on the MAC address of the request.  In IPv6 it issues IP addresses based on the DUID of the request.  This seems fine, but while all computers have a single MAC address they don't necessarily have a single DUID.  As a result, one of my servers drops off the static list and gets a dynamic IPv6 address every so often when it decides to use an alternate DUID.

I can create a firewall wall rule in IPv6 that filters traffic solely based on MAC addresses (not DUID).  Why can't the static IPv6 IP addresses be issued based solely on the MAC address instead of DUID?



This thread was automatically locked due to age.
  • Hi,

    to stop the change of IPv6 address you will need to disable the two tick boxes in the RA tab.

    Ian

    XGS118 - v21.5.0

    XG115 converted to software licence v21.5.0

    If a post solves your question please use the 'Verify Answer' button.

    • Hi Ian,

      Are you referring to the "On-link" and "Autonomous" boxes?  They are not applicable in my case since I have a stateful DHCP6.  I cannot un-check them because that portion has not been configured.  

      The "managed" and "other" flags are checked.

      Thanks

      • Hi,

        from my experience with DHCP IPv6 on the XG you need to enable RA with those flags turned off (unticked), otherwise you get a new DHCP assigned address not your static address. you will not see your statically signed IPv6 addresses in the DHCP screen like you do for IP4.

        Ian

        XGS118 - v21.5.0

        XG115 converted to software licence v21.5.0

        If a post solves your question please use the 'Verify Answer' button.

        • That's interesting.  I've never configured that portion because the Sophos "Help" states that:

          Since I don't auto generate IPv6 (stateless) addresses, I never thought it would have an impact.

          My RA looks like:

          This configuration uses my IPv6 DHCP settings to assign addresses dynamically according to my DHCP address range.  I set my static IPv6 addresses as I do for IPv4 except using the DUID instead of MAC.

          The thing that I find odd is that while my server only has one MAC address it can have several DUID addresses.  Only one of my home machines does this.  The other machines seem to stick to one DUID.

          Best regards.

          • Hi,

            with those two flags set in RA, your server will be assigned many IPv6 addresses. I found this very frustrating when trying to setup and manage device access to the internet.

            Ian

            XGS118 - v21.5.0

            XG115 converted to software licence v21.5.0

            If a post solves your question please use the 'Verify Answer' button.

        • Thanks for the good ideas to bring it. I know a lot more. :)สมัคร ufabet :J