Feature #14765
closed
DHCPv6 is limited to DUID and unable to consider IAID
0%
Description
In DHCPv6, the client identifier is not the MAC Address anymore. That concept is replaced with the DUID. If the same system has multiple interfaces (ex: an Ethernet one and a WiFi one), both may have the same DUID and will have to be distinguished using their IAID (an Interface ID).
As of now, it is impossible to reserver an IP address in pfSense's DCHPv6 server for each interface in a single system. pfSense only offers to reserver per DUID, without consideration for the IAID.
The need would be to add the option of duplicated DUID and using the IAID to distinguish between these cases.
See screenshots about duplicated DUID with separate IAID here :
https://forum.netgate.com/topic/144154/dhcpv6-static-leases-how-to-set-uniquely-per-interface-duid-iaid
See infos about how Juniper can handle this :
https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-access/topics/topic-map/dhcpv6-duplicate-client-management.html
Updated by Marcos M 4 months ago
- Project changed from pfSense Plus to pfSense
- Category changed from DHCP Server (IPv6) to DHCP (IPv6)
- Status changed from New to Rejected
Unfortunately this is not supported on ISC DHCPv6, and I've not yet seen a way to handle this on Kea.
https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcp-options#standard-dhcpv6-options
The Juniper article mentions working around it by enabling the relay agent:
[...] you must ensure the following: DHCPv6 relay agent is configured [...]
This is not a workaround we should implement. This can be considered if upstream support is added.