3
Addressing
66
IPv6 support
The
IP
address
standard
IPv6
is
designed
as
a
successor
to
IPv4,
with
the
principal
advantage
of
providing
a
much
larger
128
bit
address
space.
Among
many
other
advantages,
the
large
number
of
available
global
IPv6
addresses
means
that
NAT
is
no
longer
required
to
share
a
limited
number
of
public
IPv4
addresses.
SEG configuration objects supporting IPv6
The
following
parts
of
the
SEG
provide
IPv6
support:
•
The
address
book
•
Routing
tables
•
IP
rules
(excluding
some
actions)
Enabling IPv6
IPv6
needs
to
be
explicitly
enabled
in
the
SEG
if
it
to
be
used.
This
is
done
by
setting
the
value
of
the
setting
BlockIPVersions
to
be
None
:
Device:/>
set
Settings
IPSettings
BlockIPVersions=None
This
allows
both
IPv4
and
IPv6
packets
to
be
recognized.
If
all
IPv6
traffic
is
to
be
ignored,
the
setting
is:
Device:/>
set
Settings
IPSettings
BlockIPVersions=IPv6DropSilent
This
is
the
default
and
causes
all
IPv6
packets
to
be
ignored.
Adding an IPv6 address
IPv6
address
objects
are
created
in
the
SEG
address
book
in
the
same
way
as
for
IPv4.
For
IPv6,
only
the
all
‐
nets
‐
ip6
object
(IPv6
address
::/0
)
exists
by
default
in
the
address
book.
This
means
that
the
IPv6
address
and
network
objects
associated
with
interfaces
must
first
be
created.
Example: Adding an IPv6 address
This
example
adds
a
new
address
object
called
my_ip6_address
to
the
address
book
with
the
single
IPv6
address
2001:DB8::1
.
Device:/>
add
Address
IPAddress
my_ip6_address
Address=2001:DB8::1
Note:
As
described
in
RFC3849,
the
IPv6
prefix
2001:DB8::/32
is
specifically
reserved
for
documentation.
All
IPv6
examples
in
this
guide
use
this
network
or
addresses
from
it.
