IP Wildcard mask for IPv6 adresses

[frigault]

Greetings! I am running a VM with PA-VM-KVM-11.0.0 and wanted to test the usage of "IP Wildcard Mask" addresses in Security Policy Rules.

The addresses I want to select look like

fd00:10:244:*:2000::/80

and "IP Wildcard mask" type for addresses seemed to be the way to go. However the doc reads:

Enter an IP wildcard address in the format of an IPv4 address 

so I am wondering if there is an alternative for IPv6.

Entering  fd00:10:244:0:2000::/0:0:0:ffff:0:ffff:ffff:ffff gives an "Operation Failed" error:

-> ip-wildcard fd00:10:244:0:2000::/0:0:0:ffff:0:ffff:ffff:ffff ipdiscontmask specification too long myIpamMask -> ip-wildcard is invalid

 Thank you!

[kiwi]

Hi @frigault ,

As far as I know IPv6 wildcards are not supported.

Source:

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/objects/objects-addresses#id...

There is already a feature request for this (FR# 12378: IPv6 wildcard security policy and address objects). 

Please reach out to your local SE and have him add your vote to the request.

Kind regards,

-Kim.