Getting DHCPv6 IAID and DHCPv6 Client DUID on an interface

Hi @roberthaugen73 

Fortigate as the DHCPv6 client correctly uses the DHCP Unique Identifier (DUID) -LLT for all the interfaces.

This enables the firewall to accept default routes from router advertisements.

DUID Based on Link-layer Address Plus Time [DUID-LLT]     This type of DUID consists of a two octet type field containing the    value 1, a two octet hardware type code, four octets containing a    time value, followed by link-layer address of any one network    interface that is connected to the DHCP device at the time that the    DUID is generated.  The time value is the time that the DUID is    generated represented in seconds since midnight (UTC), January 1,    2000, modulo 2^32.  The hardware type MUST be a valid hardware type    assigned by the IANA as described in RFC 826 [14].  Both the time and    the hardware type are stored in network byte order.  The link-layer    address is stored in canonical form, as described in RFC 2464 [2].

 Local network prefix length and default router must be learned on FGT from RA(Router advertisement) packets.

For debugging on Fortigate please run the below command:-

diag debug reset

diag deb app dhcp6c -1

dia debug en

To stop debug type:- dia debug dis

Regards

Priyanka

- Have you found a solution? Then give your helper a "Kudos" and mark the solution.