[SOLVED:] Using DHCPv6 @VLAN

Dear all,

I have crated a VLAN, DHCPv4 works fine, because I permit UDP Ports 67-68 (VLAN --> Router).
However, DHCPv6 doesn't work yet, despite I have:

	option ra 'server'
	option dhcpv6 'server'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'

Are there any firewall ports to be opened, so that the VLAN can communicate with the dhcpv6 server?

WAN6 receives a /60 network and hands out a /64 to this VLAN - well... no DHCPv6, yet...

What else did I forget to get this working?

Kind regards,

DHCPv6 uses port 547 UDP client to router, and 546 for router to client.
RA and RS are types of ICMPv6 packets.

Ah - lovely!

Adding

config rule
	option name 'IOT Allow DHCP'
	list proto 'udp'
	option src 'iot'
	option dest_port '67-68 547'
	option target 'ACCEPT'

config rule
	list proto 'icmp'
	option src 'iot'
	option target 'ACCEPT'
	option name 'Allow IOT ICMP'

got me DHPCv6

Thank you kindly!

2 Likes

As you have it now, port 547 is needlessly also open for IPv4. You really should write v4 and v6 as separate rules with an option family ipv4 or option family ipv6 restricting each rule to allow only its applicable family.

2 Likes

Agreed. Sometimes, being lazy doesn't pay off.

1 Like