Technical Tip: How to analyze DHCPv6 issue

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 256829

Description

This article describes how to identify a DHCPv6 issue.

Scope

FortiGate,

Solution

Debug on DHCPv6 server:

diagnose debug disable

diagnose debug reset

diagnose debug app dhcp6s -1

diagnose debug enable

Debug on DHCPv6 relay:

diagnose debug disable

diagnose debug reset

diagnose debug app dhcp6r -1

diagnose debug enable

Debug on DHCPv6 client:

diagnose debug disable

diagnose debug reset

diagnose debug app dhcp6c -1

diagnose debug enable

To stop the debugging above:

diagnose debug disable

diagnose debug reset

It is also possible to check into a packet sniffer:

diagnose sniffer packet any 'port 546 or port 547' 6 0 l

After converting to a PCAP file:

DHCP: Solicit.
DHCP: Advertise.
DHCP: Request.
DHCP: Reply.

1815

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to analyze DHCPv6 issue

You are leaving our website