DHCPv6 prefix delegation provides an automated method for a DHCPv6 client to request an IPv6 prefix from a DHCPv6 server. The DHCPv6 server assigns a prefix to the DHCPv6 client. The DHCPv6 client can use the delegated prefix to configure IPv6 addresses on other connected networks.
You can configure a Firebox to participate in prefix delegation as a DHCPv6 client, a DHCPv6 server, or both.
External Interface as a DHCPv6 Client for Prefix Delegation
You can configure an external interface to request a delegated prefix from a DHCPv6 server. After you enable this for an external interface, you can use the delegated prefix when you configure IPv6 addresses on the trusted, optional, and custom interfaces. You can use the delegated prefix when you configure:
- Static IPv6 addresses for an interface
- IPv6 prefix advertisement
- DHCPv6 address pool
- DHCPv6 reserved addresses
For more information about how to configure the device as a DHCPv6 client for prefix delegation, go to Configure DHCPv6 Client Prefix Delegation.
Trusted, Optional, or Custom Interface as a DHCPv6 Server for Prefix Delegation
To enable the DHCPv6 server on a trusted, optional, or custom interface to delegate prefixes to DHCPv6 client, you must configure a prefix pool. You can also configure reserved prefixes for specific clients. When a DHCPv6 client requests a prefix, the DHCPv6 server assigns a prefix from the configured prefix pool, or assigns a reserved prefix.
For more information about how to configure the DHCPv6 server on an interface as a DHCPv6 server for prefix delegation, go to Configure DHCPv6 Server Prefix Delegation.