IP Wildcard mask for IPv6 adresses

frigault — Mon, 17 Jul 2023 21:59:01 GMT

Greetings! I am running a VM with PA-VM-KVM-11.0.0 and wanted to test the usage of "IP Wildcard Mask" addresses in Security Policy Rules.

The addresses I want to select look like

fd00:10:244:*:2000::/80

and "IP Wildcard mask" type for addresses seemed to be the way to go. However the doc reads:

Enter an IP wildcard address in the format of an IPv4 address

so I am wondering if there is an alternative for IPv6.

Entering fd00:10:244:0:2000::/0:0:0:ffff:0:ffff:ffff:ffff gives an "Operation Failed" error:

-> ip-wildcard fd00:10:244:0:2000::/0:0:0:ffff:0:ffff:ffff:ffff ipdiscontmask specification too long myIpamMask -> ip-wildcard is invalid

Thank you!

Re: IP Wildcard mask for IPv6 adresses

kiwi — Tue, 18 Jul 2023 09:15:47 GMT

As far as I know IPv6 wildcards are not supported.

Source:

There is already a feature request for this (FR# 12378: IPv6 wildcard security policy and address objects).

Please reach out to your local SE and have him add your vote to the request.

Kind regards,

-Kim.