IPv6 Tunnel Endpoint (Tunnelbroker.com)

[u13550]

Hi

I'm trying to "play around" with ipv6. As my ISP doesn't offer IPv6 to my connection I want to use tunnelbroker.com to setup a ipv6 (6 in 4) Tunnel.

I've read that this feature has been dropped since 4.1, is this correct? If so, ayn other chance to get this running?

I get a /64 and a /48 from tunnel broker so I thought I use my fritz.box (www.avm.de). This box works fine with the tunnel (/64 network up and running) but unfortunately it's missing a vital feature: routing the /48 to the /64 address of my PA 😞   (Internet <-> fritz.box <-> PA <-> internal Network)

I'd really like to deal with 6in4 directly on the PA but can't find a way to do this.

Thanks

Andre

[jvalentine · Accepted solution]

Andre:

You are correct that Palo Alto Networks does not natively support 6-in-4 tunnels today.  To get around this limitation, I use an external router that supports 6-in-4 tunnels, and then natively route the /48 through the Palo Alto Firewall.  It works great and I've been using it for months.  The key for you will be replacing your fritz.box with something that supports 6-in-4 tunnels and can route the /48 through the Palo Alto Networks firewall.

Good luck.

[u13550]

Hi

too bad. Unfortunately I can't replace that fritz.box that easy. It's also handling VoIP, Fax, Answering machine, and most important TVoIP.

I'll check with the vendor to see why I can't add an IPv6 route just as I can with IPv4, which would solve the problem.

meanwhile I used a Vyatta router to setup the tunnel and do DHCPv6. Basic firewall rules in place, all is working fine.

Hopefully they bring this feature in Release 5.x

Andre

[SamGong]

Is that possible to get this feature back? It is annoying to keep another firewall|hardware running just for this. Most other vendors still support it.