IPv4 and IPv6 Cannot Share an Address Group Object
IPv6 address objects are created and managed in a similar way to IPv4 objects They are called an
IP6 Address and can be used in NetDefendOS rules and other objects in the same way as an IPv4
address. However, it is not possible to combine the two in one configuration object.
For example, it is not possible to create an Address Group that contains both. The standard Address
Group object can contain only IPv4 address objects. For IPv6 there is a special object called an IP6
Group object that can contain only IPv6 addresses.
Similarly, the preconfigured all-nets address objects is a catch-all object for all IPv4 addresses.
Another object, all-nets6 represents all IPv6 addreses and only IPv6 addreses.
Furthermore, it is not possible to combine all-nets (all IPv4 addresses) with all-nets6 in a single
Address Group object. For example, if a DropAll rule is needed as the last "catch-all" rule in an IP
rule set, two rules are required to catch all IPv4 and IPv6 traffic. This is discussed further in
Section 3.6, “IP Rules”.
In the same way, a routing table could route traffic for either a IPv4 network or an IPv6 network to
the same interface but this must be done with two separate routes in the routing table, one for IPv4
and one for IPv6. It cannot be achieved using a single route.
Troubelshooting IPv6 with ICMP Ping
The CLI command ping can be used for both IPv4 and IPv6 addresses. For example:
gw-world:/> ping 2001:DB8::2
This provides the means to determine if an IPv6 host is reachable and responding.
IPv6 Usage Restrictions
The following is a summary of IPv6 restrictions in the current version of NetDefendOS:
• Management access with any NetDefendOS management interface is not possible using IPv6.
• IP rules using IPv4 and IPv6 addresses can coexist in the same IP rule set but a single rule
cannot combine IPv4 and IPv6.
• IPv6 addresses are not currently supported in IP rules with the following actions:
i. NAT
ii. SAT
iii. SLB SAT
iv. Multiplex SAT
• Routes using IPv4 and IPv6 addresses can coexist in the same routing table set but a single route
cannot combine IPv4 and IPv6.
• Routing rules using IPv4 and IPv6 addresses coexist but a single rule cannot combine IPv4 and
IPv6.
• IPv6 cannot be used for VPN or with ALGs, IDP or traffic shaping.
3.2. IPv6 Support Chapter 3. Fundamentals
96
To Next Page
Loading...
