How to Enable IPv6 M and O Flags on the Palo Alto Networks Firewall

How to Enable IPv6 M and O Flags on the Palo Alto Networks Firewall

27274
Created On 09/25/18 17:51 PM - Last Modified 06/13/23 02:52 AM


Resolution


Overview

This document describes how to enable the M and O flags for IPv6/DHCPv6 on a Palo Alto Networks firewall.

 

Details

DHCPv6 has 2 different implementations:

  • Stateful DHCP services: All DHCP information is obtained from a DHCP server
  • Stateless DHCP services: Addressing information is received by RA (Router Advertisement) and other configuration information is obtained by a DHCPv6 server

 

The client will determine which implementation is used based on the M (Managed Address Configuration) and O (Other Configuration) flag.

  • M flag set to 1 represents Stateful DHCP
  • O flag set to 1 represents Stateless DHCP

When both M and O flag are set to 0, Stateless Address Auto Configuration (SLAAC) will be used.

 

Both flags can be configured on the IPv6 tab of the Interface configuration:

flags.png

 

With both settings enabled (set to 1), the RA packets will look like the following:

flags.png

 

owner: rvanderveken
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKlCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language