Project

General

Profile

Actions

Feature #14765

closed

DHCPv6 is limited to DUID and unable to consider IAID

Added by Jacques Bourdeau 6 months ago. Updated about 2 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
DHCP (IPv6)
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Default

Description

In DHCPv6, the client identifier is not the MAC Address anymore. That concept is replaced with the DUID. If the same system has multiple interfaces (ex: an Ethernet one and a WiFi one), both may have the same DUID and will have to be distinguished using their IAID (an Interface ID).

As of now, it is impossible to reserver an IP address in pfSense's DCHPv6 server for each interface in a single system. pfSense only offers to reserver per DUID, without consideration for the IAID.

The need would be to add the option of duplicated DUID and using the IAID to distinguish between these cases.

See screenshots about duplicated DUID with separate IAID here :
https://forum.netgate.com/topic/144154/dhcpv6-static-leases-how-to-set-uniquely-per-interface-duid-iaid

See infos about how Juniper can handle this :
https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-access/topics/topic-map/dhcpv6-duplicate-client-management.html

Actions #1

Updated by Marcos M about 2 months ago

  • Project changed from pfSense Plus to pfSense
  • Category changed from DHCP Server (IPv6) to DHCP (IPv6)
  • Status changed from New to Rejected

Unfortunately this is not supported on ISC DHCPv6, and I've not yet seen a way to handle this on Kea.
https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcp-options#standard-dhcpv6-options

The Juniper article mentions working around it by enabling the relay agent:

[...] you must ensure the following: DHCPv6 relay agent is configured [...]

This is not a workaround we should implement. This can be considered if upstream support is added.

Actions

Also available in: Atom PDF