topic Re: IPv6 on public interface in General Topics

IPv6 on public interface

idelconsulting — Sun, 18 Mar 2018 21:33:12 GMT

Dear all,

I'm ttrying to get IPv6 up and running but so far without much success.

My ISP assigend a /48 range to me and they are saying I need to use DHCP. AFAIK, DHCPv6 is not supported, but NDP is.

Assume my IPv6 prefix is

abcd:1234:5678::/48

So I enabled IPv6 on the public interface and set the interface IP to

abcd:1234:5678::/48

Enabled Interface ID as Host, Anycast, RA

Also enabled router advertisements.

Something seems to be wrong as I'm getting:

An inconsistent router advertisement was received from address ...

Any idea how to debug that further?

Do I need to ask the ISP for the default gateway IPv6 address? For IPv4 I'm getting that via DHCP and added that as the default route to the VR.

What also concerns me is that when I do a packet capture for IPv6, all the router advertisements appear in the received but also in the dropped logs.

Is there anything missing so that the RA packets actually reach the firewall?

Regards,

Andreas

idelconsulting — Tue, 20 Mar 2018 21:43:07 GMT

My ISP confirmed that I need to use DHCPv6 with prefix delegation.

I suppose this is not supported by Palo Alto?

Regards,

Andreas

JimMcGrady — Thu, 08 Jun 2023 01:42:21 GMT

If an ISP is using IPv6 with DHCP, what would the interface config and routing config look like on a Palo gateway?

idelconsulting — Wed, 17 Jul 2024 22:14:53 GMT

PanOS 11 seems to add support for DHCPv6 with prefix delegation.

It now works as designed.