IPv6 Static Routes

Procedure

Step	Instructions
1	In the navigation tree, click Network Management > IPv6 Static Routes.
2	In the IPv6 Static Routes section, click Add.
3	In the Destination / Mask Length field, enter the IPv6 address and prefix (default prefix is 64).
4	Select the Next Hop Type field select: Normal - To accept and forward packets Blackhole - To drop packets, and not send ICMP unreachable packet to the traffic source Reject - To drop packets, and send ICMP unreachable packet to the traffic source
5	In the Rank field, leave the default value (60), or enter the relative rank of the IPv6 static route (an integer from 1 to 255). This value specifies the rank for the configured route when there are overlapping routes from different protocols.
6	In the Comment field, enter the applicable comment text (up to 100 characters).
7	In the Add Gateway section, click Add.
8	In the Gateway Address field, enter the IPv6 address of the next hop gateway.
9	In the Priority field, either do not enter anything, or select an integer between 1 and 8. Priority defines the order for selecting the next hop gateway when multiple next hop gateways are configured. The lower the priority, the higher the preference - priority 1 means the highest preference, and priority 8 means the lowest preference. A next hop gateway with no priority configured is preferred over a next hop gateway with priority configured. You cannot configure two next hop gateways with the same priority, because IPv6 Equal Cost Multipath Routes are not supported.
10	Click OK.
11	Select the Ping6 option, if it is necessary to monitor next hops for the IPv6 static route using `ping6`. The Ping6 feature sends ICMPv6 Echo Requests to make sure the next hop gateway for a static route is working.
12	Click Save.
13	In the Advanced Options section, you can configure the Ping6 behavior. If you changed the default settings, you must click Apply.

To add or configure the default static IPv6 route

set ipv6 static-route default

      comment {"Text" | off}

      nexthop

            gateway <IPv6 Address of Next Hop Gateway>

                  [priority <Priority>] {on | off}

                  interface <Name of Local Interface> [priority <Priority>] {on | off}

            blackhole

            reject

off

      ping6 {on | off}

      rank <Rank>

To add or configure the specific static IPv6 route

set ipv6 static-route <Destination IPv6 Address>

      comment {"Text" | off}

      nexthop

            gateway <IPv6 Address of Next Hop Gateway>

                  [priority <Priority>] {on | off}

                  interface <Name of Local Interface> [priority <Priority>] {on | off}

            blackhole

            reject

off

      ping6 {on | off}

      rank <Rank>

To show all configured static IPv6 routes

show ipv6 route static all

To remove the default static IPv6 route

set ipv6 static-route default off

To remove the specific static IPv6 route

set ipv6 static-route <Destination IPv6 Address> off

To remove the specific path only, when multiple next hop gateways are configured

set ipv6 static-route <Destination IPv6 Address> nexthop gateway <IPv6 Address of Next Hop Gateway> off

set ipv6 static-route <Destination IPv6 Address> nexthop gateway <Name of Local Interface> off

CLI Parameters

Parameter

Description

default

Defines the default static IPv6 route.

<Destination IPv6 Address>

Defines the IPv6 address of destination host or network using the CIDR notation (IPv6 Address / Mask Length).

Example: fc00::/64

Mask length must be in the range 8-128.

comment {"Text" | off}

Defines of removes the optional comment for the static route.

Write the text in double quotes.
Text must be up to 100 characters.
This comment appears in the Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Portal and in the output of the "show configuration" command.

nexthop

Defines the next hop path, which can be a gateway, blackhole, or reject.

gateway

Specifies that this next hop accepts and sends packets to the specified destination.

blackhole

Specifies that this next hop drops packets, but does not send ICMP unreachable packet to the traffic source.

reject

Specifies that this next hop drops packets and sends ICMP unreachable packet to the traffic source.

address <IPv6 Address of Next Hop Gateway>

Defines the IPv6 address of the next hop gateway.

interface <Name of Local Interface>

Identifies the next hop gateway by the local interface that connects to it.

Use this option only if the next hop gateway has an unnumbered interface.

priority <Priority>

Defines the order for selecting the next hop gateway when multiple next hop gateways are configured.

The lower the priority, the higher the preference - priority 1 means the highest preference, and priority 8 means the lowest preference.

A next hop gateway with no priority configured is preferred over a next hop gateway with priority configured.

You cannot configure two next hop gateways with the same priority, because IPv6 Equal Cost Multipath Routes are not supported.

nexthop ... on

Adds the specified next hop gateway.

nexthop ... off

Deletes the specified next hop gateway.

If you specify a next hop, only the specified path is deleted.

If you do not specify a next hop, the route and all related paths are deleted.

off

Removes the static route.

ping6 {on | off}

Enables (on) or disables (off) the ping of specified next hop gateways for IPv6 static routes.

The Ping6 feature sends ICMPv6 Echo Requests to make sure the next hop gateway for a static route is working.

Gaia includes in the kernel forwarding table only next hop gateways, which are verified as working.

When Ping6 is enabled, Gaia adds an IPv6 static route to the kernel forwarding table only after at least one next hop gateway is reachable.

To configure the ping6 behavior, run:

set ping count <value>

set ping interval <value>

rank <Rank>

Selects a route, if there are many routes to a destination that use different routing protocols.

The route with the lowest rank value is selected.

Use the rank keyword in place of the nexthop keyword with no other parameters.

Accepted values are: default (60), integer numbers from 0 to 255.

In addition, see this command: set protocol-rank protocol <Rank>

Example

[Global] MyChassis-ch01-01 > set ipv6 static-route 3100:192::0/64 nexthop gateway 3900:172::1 on
 
[Global] MyChassis-ch01-01 > set ipv6 static-route 3100:192::0/64 nexthop gateway 3900:172::1 interface eth3 on
 
[Global] MyChassis-ch01-01 > set ipv6 static-route 3100:192::0/64 nexthop gateway 3900:172::1 priority 3 on
 
[Global] MyChassis-ch01-01 > set ipv6 static-route 3100:192::0/64 nexthop reject
 
[Global] MyChassis-ch01-01 > set ipv6 static-route 3100:192::0/64 nexthop blackhole
 
[Global] MyChassis-ch01-01 > set ipv6 static-route 3100:192::0/64 off
 
[Global] MyChassis-ch01-01 > set ipv6 static-route 3100:192::0/64 nexthop gateway 3900:172::1 off
 
[Global] MyChassis-ch01-01 > set ipv6 static-route 3100:192::0/64 nexthop gateway 3900:172::1 interface eth3 off
 
[Global] MyChassis-ch01-01 > show ipv6 route static
Codes: C - Connected, S - Static, B - BGP, Rg - RIPng, A - Aggregate,
O - OSPFv3 IntraArea (IA - InterArea, E - External),
K - Kernel Remnant, H - Hidden, P - Suppressed
 
S 3100:55::1/64 is directly connected
S 3200::/64 is a blackhole route
S 3300:123::/64 is a blackhole route
S 3600:20:20:11::/64 is directly connected, eth3