Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
How to Enable and Disable IPv6 Firewalling - Knowledge Base - Palo Alto Networks

How to Enable and Disable IPv6 Firewalling

120822
Created On 09/25/18 17:59 PM - Last Modified 01/10/23 04:36 AM


Symptom


How to Enable and Disable IPv6 Firewalling

Environment


  • Palo Alto Firewalls
  • PAN-OS 7.1 or higher
  • IPv6


Resolution


The IPv6 firewalling can be enabled or disabled through the WebUI or the CLI. This feature is enabled by default.

 

WebUI

The IPv6 firewalling can be enabled/disabled under Device > Setup > Session:

 

PAN-OS 7.1:

2015-07-22_16-01-57.png

 

PAN-OS 8 and up

IPV6 firewalling.png

 

CLI

> configure
# set deviceconfig setting session ipv6-firewalling [yes|no]
# commit
# exit

 

Interface configuration example:

ipv6 interface.png

 

To enable or disable IPv6 on an interface via CLI:
 

> configure
# set network interface ethernet ethernet1/3 layer3 ipv6 enabled [yes|no]
# commit
# exit

 

 



Additional Information


Commit will Fail with Error  'IPv6 addresses are not allowed because IPv6-firewalling is disabled' if this option is Disabled and an IPv6 Address is used in policies like mentioned below:

User-added image


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClMLCA0&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language