How to Enable IPv6 M and O Flags on the Palo Alto Networks Firewall

Overview

This document describes how to enable the M and O flags for IPv6/DHCPv6 on a Palo Alto Networks firewall.

Details

DHCPv6 has 2 different implementations:

• Stateful DHCP services: All DHCP information is obtained from a DHCP server
• Stateless DHCP services: Addressing information is received by RA (Router Advertisement) and other configuration information is obtained by a DHCPv6 server

The client will determine which implementation is used based on the M (Managed Address Configuration) and O (Other Configuration) flag.

• M flag set to 1 represents Stateful DHCP
• O flag set to 1 represents Stateless DHCP

When both M and O flag are set to 0, Stateless Address Auto Configuration (SLAAC) will be used.

Both flags can be configured on the IPv6 tab of the Interface configuration:

With both settings enabled (set to 1), the RA packets will look like the following:

owner: rvanderveken