Palo Alto Networks Knowledgebase: GlobalProtect Giving a Warning when Commit/Validate: "tunnel tunnel.x ipv6 is not enabled"

GlobalProtect Giving a Warning when Commit/Validate: "tunnel tunnel.x ipv6 is not enabled"

1246
Created On 04/25/19 01:00 AM - Last Updated 04/26/19 17:33 PM
GlobalProtect Portal Interfaces Web Interface Initial Configuration VPNs GlobalProtect Hardware PAN-OS
Symptom
On configuring GlobalProtect and assigning a tunnel interface to the GlobalProtect VPN, we see a warning message popup in the Commit/Validate saying:

Warnings:
– Warning: tunnel tunnel.1 ipv6 is not enabled. IPv6 address will be ignored!
– (Module: rasmgr)
 

 Environment
PAN-OS 
GlobalProtect
Interface configuration for VPN

 Cause
The support for IPv6 GlobalProtect clients has been introduced in PAN-OS 8.0, and you are not using IPv6 for GlobalProtect.



 

 Resolution
This warning can be eliminated by enabling the option "Enable IPv6 on the interface" under Network > Interfaces > Tunnel > tunnel.x and check the box "Enable IPv6 on the interface."
 

 Additional Information
We can also fix the issue by disabling IPv6 firewall globally on the firewall under Device > Setup > Session > Uncheck Ipv6 firewalling

 

 Attachments
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLkrCAG&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments