PANOS 8.0.4 warning ipv6 not enabled on tunnel interface

[dan731028]

Hello All,

I just upgraded to 8.0.4 and now when I commit the tunnel interface associated with my external GP gateway gives a warning that "ipv6 is not enabled on the tunnel interface tunnel.1.  IPv6 address will be ignored!"

Did something change in the gateway configuration.  I've gone over and over a few times and am not finding a reference to IPv6 anywhere.  It's set to use IPv4 Only.  If I remove the tunnel interface from the gateway config or I enable IPv6 on the tunnel interface, the warning goes away.  Is there a setting I need to change or could this be an issue with 8.0.4?

[nextgenhappines · Accepted solution]

PAN OS 8.0 added IPv6 support for Global Protect.  

https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/globalprotect-features/ipv...

If you don't need IPv6 for Global Protect, just ignore the warning message.  It is perfectly safe.

E

[dan731028]

Thanks for the reply.  Would there be a reason not to enable IPv6 on the tunnel interface?  If GP isn't using IPv6 for client IPs, I don't see how it could affect anything.

[Mick_Ball · Accepted solution]

To confirm... I enabled v6 on all tunnels just to remove the warning. It made no difference to GP operation. 

[dan731028]

Thanks for the confirmation!

[fb-pan]

JFYI:

I did open a tech support case for this in december.

I got the infomation, this is a kown cosmetic bug.

There will be no fix in 8.0.x

There should be a solution in 8.1.

I can't confirm this with 8.1.0, but will wait for 8.1.1.

[fwmike]

Not fixed in 9.0.x.

[MP18]

I tested on the PA 8.1.9 GP external Gateway I do not get any warning message.

[fwmike]

Thanks @MP18 . To clarify my post, I still get the warnings on 8.1.9-h4 and 9.0.5 when the enable IPv6 on the interface is unchecked in the tunnel interface config. From what @fb-pan posted, this was going to be addressed in future code releases. I do not want to use the workaround.

[MP18]

Thanks for replying back.

Try 8.1.9 if you can as it works fine for me without enabling Tunnel Interface for IPv6.

[fwmike]

@MP18 

I'm still seeing the commit warnings with 8.1.9.

• Warning: tunnel tunnel.666 ipv6 is not enabled. IPv6 address will be ignored!
• (Module: rasmgr)

[MP18]

please try this 

Disable IPv6 Firewalling under Device - Setup - Session - Session Settings will get rid of those warnings.

[fwmike]

Unchecking Enable IPv6 Firewalling from Session Settings did not clear the tunnel interface warnings.

[MP18]

I mean you need to check the option for IPV6  Firewalling from Session Settings 

[John_Babbitt]

I disabled the IPv6 Firewalling option in that exact location you specified, and I still got "Warning: tunnel tunnel.41 ipv6 is not enabled. IPv6 address will be ignored!" So, no, that doesn't work.