IPv6 DHCP-PD Support

So it’s been three and a half years since the original post - DHCP-PD still does not seem to be supported or am I missing something? Is it on the roadmap?

Hi Shred,

you have missed nothing and there does not appear to be any improvement in v18 which seems strange?

Ian

Is there any new information on this when we can expect it?

No IPv6 improvements in v18 GA compared with v17.5.9.

Sophos need to give IPv6 on the XG some love - it's been neglected for too long.

For comparison - ideas.sophos.com has DKIM signing one vote ahead of IPv6 DHCP-PD, and DKIM signing is in v18.

Here's hoping IPv6 DHCP-PD is in v18.1.

Hi Chris, 

there are improvements in V18 IPv6, while not what we were all hoping for they are steps forward.

SSL/TLS works in IPv6, WEB exceptions now works. There are other bits I cannot remember of the top of my head.

Ian

Hi Ian,

Thanks for that info.

My tolerance for bovine excrement is clearly lower than yours - I've generally given up in disgust at not getting it working at lower layers before getting to that point.

No improved functionality at the PPPoE interface level, 6in4 still has the same problem I reported back on 16.5, and the NAT requirement (NAT is not a security boundary!) make me shake my head.

When I have a spare weekend I'll re-architect my WAN side of the network, get a public /29 subnet from my ISP, lift the IPv6 config from my old Cisco 877 and put it on a spare 887 I have, then put the 887 in between my ISP and my XG Firewall, then see how the IPv6 experience goes.

Hi Chris,

one of the extra items that I missed is you can now have an external IPv6 interface without IP4 but this using DHCP, not PPPoE.

I have my IPv6 working after a major restructure of my network to improve the IPv6 security/control of access for clientless devices. I gave up on VLANs and IPv6 for the moment.

Ian

Update.

My understanding is that Telstra uses RA to deploy the addresses, though not sure.

Hi Chris,

one of the extra items that I missed is you can now have an external IPv6 interface without IP4 but this using DHCP, not PPPoE.

I have my IPv6 working after a major restructure of my network to improve the IPv6 security/control of access for clientless devices. I gave up on VLANs and IPv6 for the moment.

Ian

Update.

My understanding is that Telstra uses RA to deploy the addresses, though not sure.