Thread Info
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 11259 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPv6 addressing in statefull mode

philippehector

Hi to the one who will read ;),

We encounter an annoying issue when using DHCPv6 on a ASG 220 - 9.315-2.

Clients devices receive an ip address in the range configured, but we can't reach anything on the same subnet and obviously on the outside (WAN or other VLAN). We can ping the link-local address of the gateway, but not more.

When we use manual settings, everything's ok. We can ping public DNS and all IPv6 configured devices on the network.

Do you have any idea on how to fix this issue. Switching in stateless mode not being an option for now :)

Is there any option to set up as next-hop or anything else ?

Thank you for your help... i'm trying not to lose my 8 remaining hairs...

Regards



This thread was automatically locked due to age.
Parents Reply
  • in reply to Scott_Klassen

    Hi,
    That's the point, i don't find any way to specify the gateway address when using the dhcpv6. It automatically announce the gateway link-local, not its ip address. But by the way, with this address, they should be able to communicate, and they don't. Or there's something i'm missing.

    To answer you clearly:
    - manual mode: I use the gateway interface private address (fd::10:4:2:ff/120 for instance)
    - in dhcpv6: no gateway option
    - IPv6 DNS server is the ASG

    Thank you

Children
  • in reply to philippehector
    Did you also create a prefix advertisement for this subnet with flag "Managed (stateful)" set?

    DHCPv6 standard doesn't contain a gateway definition, it is handled by the prefix advertisement.

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
  • in reply to scorpionking
    Yes i did.
    It seems some routes are missing but it should not affect the communication with the gateway :/
    The interfaces of the testing server are bridged, could it be a problem ?
Unfiltered HTML