Palo Alto Networks Knowledgebase: How to Create a Packet Filter for IPv6 Addresses

How to Create a Packet Filter for IPv6 Addresses

1934
Created On 02/07/19 23:41 PM - Last Updated 02/07/19 23:42 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection
Resolution

Overview

This document describes how to create a packet filter for IPv6 addresses from the CLI and WebGUI.

 

Steps

From the CLI

Use the following command:

> debug data place packet-diag set filter match ipv6-only yes source <source> destination <destination>

Note: "match ipv6-only yes" must be set:

 

For example:

> debug dataplane packet-diag set filter match ipv6-only yes source 2001:4ca0:0:f000:89d4:84a3:61b9:eb88 destination 2001:4ca0:0:ff00:214:4fff:fe0f:6162

 

From the web UI

  1. Go to Monitor > Packet Capture
  2. Click Manage Filters
  3. Add a filter using the IPv6 addresses and make sure to check the IPv6 box.
    Screen Shot 2014-08-04 at 11.12.59 AM.png

 

The current filter can be seen from the CLI:

> debug dataplane packet-diag show setting

 

--------------------------------------------------------------------------------

Packet diagnosis setting:

--------------------------------------------------------------------------------

Packet filter

  Enabled:                   no

  Match pre-parsed packet:   no         

  Index 1: 2001:4ca0:0:f000:89d4:84a3:61b9:eb88[0]->2001:4ca0:0:ff00:214:4fff:fe0f:6162[0], proto 0

           ingress-interface any, egress-interface any, exclude non-IP, IPv6 only

 

owner: gbogojevic



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClvxCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language