How to Enable and Disable IPv6 Firewalling
100195
Created On 09/25/18 17:59 PM - Last Modified 01/10/23 04:36 AM
Symptom
How to Enable and Disable IPv6 Firewalling
Environment
- Palo Alto Firewalls
- PAN-OS 7.1 or higher
- IPv6
Resolution
The IPv6 firewalling can be enabled or disabled through the WebUI or the CLI. This feature is enabled by default.
WebUI
The IPv6 firewalling can be enabled/disabled under Device > Setup > Session:
PAN-OS 7.1:
PAN-OS 8 and up
CLI
> configure
# set deviceconfig setting session ipv6-firewalling [yes|no]
# commit
# exit
Interface configuration example:
To enable or disable IPv6 on an interface via CLI:
> configure
# set network interface ethernet ethernet1/3 layer3 ipv6 enabled [yes|no]
# commit
# exit
Additional Information
Commit will Fail with Error 'IPv6 addresses are not allowed because IPv6-firewalling is disabled' if this option is Disabled and an IPv6 Address is used in policies like mentioned below: