ClusterXL Support for IPv6 OSPFv3

ClusterXL R80.20 and higher supports OSPFv3.

OSPFv3 requires support of Link-Local Virtual IP address, because it uses the Virtual IP as the source IP address in communication with the OSPFv3 neighbors.

An IPv6 Link-Local address is automatically added to each interface when IPv6 is enabled on GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems..

You can override the automatic Link-Local address with manual configuration.

Manual and automatic configuration of Link-Local VIP is possible on every interface that has a global VIP address.

Notes:

  • In automatic configuration, when an IPv4 address changes, the IPv6 Link-Local address changes as well.

  • In manual configuration, when the IPV4 address changes, the manually configured IPv6 address persists.

  1. Set a Link-Local address on the interface.

    To manually configure a Link-Local VIP, in the Expert mode, run:

  2. Do one of these actions:

    • Install the Access Control Policy.

    Or

    • Run the cpstop command and then run the cpstart command.

  3. Check the state of the cluster memberClosed Security Gateway that is part of a cluster. interfaces:

  4. Enable OSPFv3 on the interface with the Link-Local VIP. In Gaia Clish, run:

    set ipv6 ospf3 interface <Name of Interface> area backbone on

    save config

show ipv6 ospf3 interfaces

Save a copy of this file:

$FWDIR/conf/linklocal_local.vip

Mode

Shell

Instructions

Gateway

Expert mode

cphaconf delete_link_local <Name of Interface> <Cluster IP Address>

 

Gaia Clish

  1. set ipv6 ospf3 interface <Name of Interface> area backbone off

  2. save config

VSX

Expert mode

cphaconf delete_link_local -vs <VSID> <Name of Interface> <Cluster IP Address>

 

 Gaia Clish

  1. set virtual-system <VSID>

  2. set ipv6 ospf3 interface <Name of Interface> area backbone off

  3. save config