Technical Tip: How to analyze DHCPv6 issue

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 256829

Description

This article describes how to identify a DHCPv6 issue.

Scope

FortiGate,

Solution

1) Debug on DHCPv6 server:

diag debug app dhcp6s -1

diag debug enable

2) Debug on DHCPv6 relay:

diag debug app dhcp6r -1

diag debug enable

3) Debug on DHCPv6 client:

diag debug app dhcp6c -1

diag debug enable

To stop the debugging above:

diag debug disable

diag debug reset

It is also possible to check into a packet sniffer:

diag sniffer packet any 'port 546 or port 547' 6 0 l

After converting to a PCAP file:

1) DHCP: Solicit

2) DHCP: Advertise

3) DHCP: Request

4)DHCP: Reply

649

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.