System Configuration

Important:

Before you can configure IPv6 addresses and IPv6 static routes, you must:

Step

Instructions

1

Enable the IPv6 support.

2

Reboot.

3

To configure IPv6 addresses, see Network Interfaces.

To configure IPv6 static routes, see IPv6 Static Routes.

To enforce a Security Policy for IPv6 traffic:

Step

Instructions

1

Enable the IPv6 support in Gaia OS on both the Security Management ServerClosed Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. and the Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. (each Cluster MemberClosed Security Gateway that is part of a cluster.).

2

Connect with SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. to the Management ServerClosed Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server..

3

Create the applicable IPv6 objects.

4

Create the applicable IPv6 rules in the Access Control Policy.

5

Install the Access Control Policy on the Security Gateway (the ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing.) object.

Configuring IPv6 Support in Gaia Portal

Important - On Scalable Platforms (Maestro and Chassis), you must connect to the Gaia PortalClosed Web interface for the Check Point Gaia operating system. of the applicable Security Group.

Step

Instructions

1

With a web browser, connect to Gaia Portal at:

https://<IP address of Gaia Management Interface>

If you changed the default port of Gaia Portal from 443, then you must also enter it (https://<IP address>:<Port>).

2

From the navigation tree, click System Management > System Configuration.

3

In the IPv6 Support section, select On.

4

Click Apply.

5

When prompted, select Yes to reboot.

Important - IPv6 support is not available until you reboot.

Configuring IPv6 Support in Gaia Clish

Important:

  • On Scalable Platforms (Maestro and Chassis), you must run the applicable commands in Gaia gClish of the applicable Security Group.

  • After you add, configure, or delete features, run the "save config" command to save the settings permanently.

  • To configure IPv6 support:

    set ipv6-state {on | off}

    Important - This change requires reboot.

  • To show the state of IPv6 support:

    show ipv6-state

Step

Instructions

1

Connect to the command line on Gaia.

2

Log in to Gaia ClishClosed The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

3

On Scalable Platforms, go to Gaia gClish:

Type gclish and press Enter.

4

Enable the IPv6 support:

set ipv6-state on

5

Save the changes:

save config

6

Reboot:

reboot

Important - IPv6 support is not available until you reboot.

Configuring IPv6 Support with Gaia API

See Working with Gaia RESTful API

Step

Instructions

1

Enable the IPv6 support.

  1. In the Gaia API Reference:

    1. Open the chapter "Networking".

    2. Open the section "IPv6".

  2. Run this API command:

    set-ipv6

2

Reboot.

  1. In the Gaia API Reference:

    Open the chapter "System".

  2. Run this API command:

    run-reboot

3

Configure IPv6 addresses on the applicable interfaces.

  1. In the Gaia API Reference:

    1. Open the chapter "Interfaces".

    2. Open the applicable section.

      For example, "Physical Interfaces".

  2. Run the applicable API "set" command to configure the IPv6 address on the applicable interface.

    For example:

    set-physical-interface

4

Configure the applicable IPv6 static routes.

See IPv6 Static Routes.

In this release, Gaia API supports only IPv4 static routes.