GlobalProtect Giving a Warning when Commit/Validate: "tunnel tunnel.x ipv6 is not enabled"
Created On 04/25/19 01:00 AM - Last Updated 04/26/19 17:33 PM
GlobalProtect Portal Interfaces Web Interface Initial Configuration VPNs GlobalProtect Hardware PAN-OSSymptom
On configuring GlobalProtect and assigning a tunnel interface to the GlobalProtect VPN, we see a warning message popup in the Commit/Validate saying:
– Warning: tunnel tunnel.1 ipv6 is not enabled. IPv6 address will be ignored!
– (Module: rasmgr)
Interface configuration for VPN
The support for IPv6 GlobalProtect clients has been introduced in PAN-OS 8.0, and you are not using IPv6 for GlobalProtect.
This warning can be eliminated by enabling the option "Enable IPv6 on the interface" under Network > Interfaces > Tunnel > tunnel.x and check the box "Enable IPv6 on the interface."
We can also fix the issue by disabling IPv6 firewall globally on the firewall under Device > Setup > Session > Uncheck Ipv6 firewalling