Salesforce

How to Enable and Disable IPv6 Firewalling

Printable View
« Go Back

Information

 
TitleHow to Enable and Disable IPv6 Firewalling
URL NameHow-to-Enable-and-Disable-IPv6-Firewalling
SummaryHow to Enable and Disable IPv6 Firewalling
Validation StatusValidated - External
Publication StatusPublished
Symptom
How to Enable and Disable IPv6 Firewalling
Environment
  • Palo Alto Firewalls
  • PAN-OS 7.1 or higher
  • IPv6
Cause
Resolution

The IPv6 firewalling can be enabled or disabled through the WebUI or the CLI. This feature is enabled by default.

 

WebUI

The IPv6 firewalling can be enabled/disabled under Device > Setup > Session:

 

PAN-OS 7.1:

2015-07-22_16-01-57.png

 

PAN-OS 8 and up

IPV6 firewalling.png

 

CLI

> configure
# set deviceconfig setting session ipv6-firewalling [yes|no]
# commit
# exit

 

Interface configuration example:

ipv6 interface.png

 

To enable or disable IPv6 on an interface via CLI:
 

> configure
# set network interface ethernet ethernet1/3 layer3 ipv6 enabled [yes|no]
# commit
# exit

 

 

Additional Information
Commit will Fail with Error  'IPv6 addresses are not allowed because IPv6-firewalling is disabled' if this option is Disabled and an IPv6 Address is used in policies like mentioned below:

User-added image
Legacy ID53351
Legacy Urlhttp://live.paloaltonetworks.com:80/t5/Configuration-Articles/How-to-Enable-and-Disable-IPv6-Firewalling/ta-p/53351
Auto Assistant Signature
Powered by