OPNsense Forum

English Forums => 25.7, 25.10 Series => Topic started by: rjopn on November 25, 2025, 08:51:10 PM

Title: KEA IPv6 Leases
Post by: rjopn on November 25, 2025, 08:51:10 PM
The "Services: Kea DHCP: Leases DHCPv4" shows to which interface the IP-address is assigned.

The "Services: Kea DHCP: Leases DHCPv6" shows only "LAN" as interface.

Have I done something wrong?



Title: Re: KEA IPv6 Leases
Post by: Patrick M. Hausen on November 25, 2025, 08:59:56 PM
Apparently there are no IPv6 leases on any other interface?
Title: Re: KEA IPv6 Leases
Post by: Leo999 on November 25, 2025, 09:16:27 PM
Make sure that your device supports DHCPv6. For example, Google devices currently only support slacc, which will not appear on KEA IPv6 leases.
Title: Re: KEA IPv6 Leases
Post by: meyergru on November 25, 2025, 09:26:01 PM
Many IoT devices only support SLAAC, if they support IPv6 at all.

Other than that, you have to select the correct RA mode to instruct devices to use DHCPv6 for all interfaces where you want it.

To me, it does not make much sense to use DHCPv6, even if you want to identify devices, because with IPv6 privacy extensions and randomized MACs these days, you cannot effectively do that anyway. Therefore, I prefer to use SLAAC only: https://forum.opnsense.org/index.php?topic=45822.0
Title: Re: KEA IPv6 Leases
Post by: rjopn on November 26, 2025, 08:18:25 PM
Quote from: Patrick M. Hausen on November 25, 2025, 08:59:56 PMApparently there are no IPv6 leases on any other interface?

Thanks. The IPv4 Web-GUI shows them "correct".
Title: Re: KEA IPv6 Leases
Post by: rjopn on November 26, 2025, 08:27:22 PM
Quote from: meyergru on November 25, 2025, 09:26:01 PMMany IoT devices only support SLAAC, if they support IPv6 at all.

Other than that, you have to select the correct RA mode to instruct devices to use DHCPv6 for all interfaces where you want it.

To me, it does not make much sense to use DHCPv6, even if you want to identify devices, because with IPv6 privacy extensions and randomized MACs these days, you cannot effectively do that anyway. Therefore, I prefer to use SLAAC only: https://forum.opnsense.org/index.php?topic=45822.0


Thanks. I will have a look at it...
Title: Re: KEA IPv6 Leases
Post by: Patrick M. Hausen on November 26, 2025, 09:04:05 PM
Quote from: rjopn on November 26, 2025, 08:18:25 PMThanks. The IPv4 Web-GUI shows them "correct".

I meant probably all these leases ARE in the LAN interface. Can you tell for sure they belong anywhere else?
Title: Re: KEA IPv6 Leases
Post by: rjopn on December 06, 2025, 10:13:44 AM
Quote from: Patrick M. Hausen on November 26, 2025, 09:04:05 PM
Quote from: rjopn on November 26, 2025, 08:18:25 PMThanks. The IPv4 Web-GUI shows them "correct".

I meant probably all these leases ARE in the LAN interface. Can you tell for sure they belong anywhere else?

Thanks. I am now using SLAAC...

The DHCPv6 leases are coming from different interfaces:

HOME = ::10
IOT =  ::20

but it shows only LAN.
Title: Re: KEA IPv6 Leases
Post by: meyergru on December 06, 2025, 10:27:14 AM
As long as Kea DHCPv6 is not active for an interface, it is neither shown nor selectable in the interface filter of the "leases" display.

SLAAC is never shown at all, because those are no leases - the clients decide for themselves, which suffix they use. You would see SLAAC assigments in the NDP table only. If you ever had DHCPv6 leases, they will show up for a long time after they have been handed out, though.