How to configure IPv6 advertising on PAN-OS 4.0.4?

[hankim]

I've set up a global IPv6 address on my interface on PA-2050 btu I can't find any place to advertise the network and router - info to the clients. How can I set up this?

CLI-commands?

[ncampagna · Accepted solution]

Hi Hankim,

In PAN-OS 4.0 we do not support router advertisement messages on our layer 3 interfaces (VLAN, L3, L3 subinterface).  So at this time you can only use static addressing to point to the firewall as the default gateway.  We will be addressing this in a future release.

Thanks,

Nick

[mrajdev]

The clients and routers on the same network use the link local address to communicate with each other, so if all the devices are on the same network then you do not need to advertise the global address to the client and routers. Hope this helps.

Thanks

[hankim]

Hi again,

What I@ve done so far:

I´ve added the following IPv6 addresses in to the config:

     ethernet 1/2.50

     2001:8C0:3210:128::1/64

     ethernet 1/2.10

     2001:8C0:3210:100::1/64

When I try to get a computer up and running with autoconfig on IPv6 on the network 2001:8C0:3210::/64 it doesn´t get an IPv6 address.

If I then put on DHCP relay to my DHCP server and put on a IPV6 scope I@m getting an IP address but I can´t ping 2001:8C0:3210:128::1.

Normally a client should be configured with an IPv6 address through a non-DHCPv6 based mechanism such as IPv6 address auto-configuration (based on the IPv6 prefixes included in router advertisements), or static IP address configuration.

For me it seems like my Palo Alto 2050 doesn´t announce the prefix and routing information to the clients? Is that correct?

How can I fix this?

[ncampagna · Accepted solution]

Hi Hankim,

In PAN-OS 4.0 we do not support router advertisement messages on our layer 3 interfaces (VLAN, L3, L3 subinterface).  So at this time you can only use static addressing to point to the firewall as the default gateway.  We will be addressing this in a future release.

Thanks,

Nick

[hankim]

Hi Nick,

Thanks for the update.

Looking forward for this update.

Please keep me posted when this is available:-)

- Kim

[jochristian]

Will router advertisement messages be available in version 4.1?

We really need this for one of our customers.

Jo Christian

[ncampagna]

Hi Jo Christian,

Router advertisements are not part of the 4.1 release.  A workaround will be needed for now.

Thanks,

Nick

[kihan]

Hi Nick,

Will this be supported in the next release. Timeframe?

- Kim

[ncampagna]

Hi Kim,

I'm sorry but I cannot make comments related to roadmap content or timing on this forum.  I can suggest that you speak to your account team to see if we'll have available spots in our next beta...

Thanks,

Nick