System Configuration

Important:

  • R82 does not support IPv6 Address on the Gaia Management Interface (Known Limitation PMTR-47313).

  • On a Multi-Domain Security Management Server, follow these instructions to configure an IPv6 address - Configuring an IPv6 Address on a Multi-Domain Server.

  • Scalable Platform Security Group in the Traditional VSX mode: It is not supported to enable IPv6 in the Security Group before you create and configure a new VSX Gateway object in the Traditional VSX mode. You must first create the new VSX Gateway object and only then enable and configure IPv6 in Gaia gClish (Known Limitation 01341918).

Before you can configure IPv6 addresses and IPv6 static routes, you must:

Step

Instructions

1

Enable the IPv6 support.

2

Reboot.

3

To configure IPv6 addresses, see Network Interfaces.

To configure IPv6 static routes, see IPv6 Static Routes.

To enforce a Security Policy for IPv6 traffic:

Step

Instructions

1

Enable the IPv6 support in Gaia OS on both the Security Management Server and the Security Gateway (each Cluster Member).

2

Connect with SmartConsole to the Management Server.

3

Create the applicable IPv6 objects.

4

Create the applicable IPv6 rules in the Access Control Policy.

5

Install the Access Control Policy on the Security Gateway (the Cluster) object.

Configuring IPv6 Support in Gaia Portal

Important - On Scalable Platforms (ElasticXL, Maestro, and Chassis), you must connect to the Gaia Portal of the applicable Security Group.

Step

Instructions

1

With a web browser, connect to Gaia Portal at:

https://<IP address of Gaia Management Interface>

If you changed the default port of Gaia Portal from 443, then you must also enter it (https://<IP address>:<Port>).

2

From the navigation tree, click System Management > System Configuration.

3

In the IPv6 Support section, select On.

4

Click Apply.

5

When prompted, select Yes to reboot.

Important - IPv6 support is not available until you reboot.

Configuring IPv6 Support in Gaia Clish

Important:

  • On Scalable Platforms (ElasticXL, Maestro, and Chassis), you must run the applicable commands in Gaia gClish of the applicable Security Group.

  • After you add, configure, or delete features, run the "save config" command to save the settings permanently. Scalable Platforms save the changes automatically.

  • To configure IPv6 support:

    set ipv6-state {on | off}

    Important - This change requires reboot.

  • To show the state of IPv6 support:

    show ipv6-state

Step

Instructions

1

Connect to the command line on Gaia.

2

Log in to Gaia Clish.

3

On Scalable Platforms, go to Gaia gClish:

Type gclish and press Enter.

4

Enable the IPv6 support:

set ipv6-state on

5

Save the changes:

save config

6

Reboot:

reboot

Important - IPv6 support is not available until you reboot.

Configuring IPv6 Support with Gaia API

See Working with Gaia RESTful API

Step

Instructions

1

Enable the IPv6 support.

  1. In the Gaia API Reference:

    1. Open the chapter "Networking".

    2. Open the section "IPv6".

  2. Run this API command:

    set-ipv6

2

Reboot.

  1. In the Gaia API Reference:

    Open the chapter "System".

  2. Run this API command:

    run-reboot

3

Configure IPv6 addresses on the applicable interfaces.

  1. In the Gaia API Reference:

    1. Open the chapter "Interfaces".

    2. Open the applicable section.

      For example, "Physical Interfaces".

  2. Run the applicable API "set" command to configure the IPv6 address on the applicable interface.

    For example:

    set-physical-interface

4

Configure the applicable IPv6 static routes.

See IPv6 Static Routes.

In this release, Gaia API supports only IPv4 static routes.