ipv6 tunneled in ipv4 (protocol 41) - Hurricane Electric Free IPv6 Tunnel Broker

[Bartosz]

I am trying to setup ipv6 tunneled in ipv4 on one of my mac client machine that is behind nat. (192.168.1.100)

Is this supported by PA-200 firewall or do i need to setup special rules to allow it or even some sort of destination NAT?

Lets say in the example public IP is 1.1.1.1 and private ip is 192.168.1.100 and commands required to setup a tunnel one the client are:

Macos example:

ifconfig gif0 create
ifconfig gif0 tunnel 1.1.1.1 184.105.253.14
ifconfig gif0 inet6 2001:111:1111:d5::2 2001:111:1111:d5::1 prefixlen 128
route -n add -inet6 default 2001:111:1111:d5::1

It does not work for me and tunnel is not established.

[JayGolf]

Hi @Bartosz ,

ipv6 over ipv4 tunneling is supported by Palo. I would recommend following the PAN-OS Admin Guide.

in setting up your tunnel.

Additionally, be sure to check the following:

1. IPv6 is enabled on the firewall.

2. Necessary Security Policies are created to allow the tunnel traffic to pass through.

3. Configure NAT since your Mac client, configure a DNAT policy to map the public IP to the internal IP of your Mac.

4. Verify Firewall zones and interfaces are configured correctly