Sophos XG IPV6 Support timeline

And IPv6 fqdn recognition and the removal of the mandatory NAT etc etc.

ian

Hello there,

Thank you for contacting the Sophos Community.

I will check internally and get back to you by Wednesday.

Regards,

Hello,

SFOS v20 will offer IPV6 prefix delegation for DHCP (DHCP -PD). However, IPV6 for PPPoE isn’t committed for v20.

If you would like to know more about the status of IPv6 PPPoE I would recommend you to reach out to your Sales Engineer and or Account Manager.

Regards,

Thanks, that's partial good news, we'll need to keep a router in front of the sophos appliance for IPV6 PPPoE if it doesn't make its way to 20.0 but we should be able to start using the static IPV6 /48 we got from the ISP when 20.0 drops.

Hi,

you can use the /48 now, but you will need a Nat.

ian

How so? 

Hi,

1/. Assign IPv6 address to your internal interfaces.

2/. create DHCP servers for each address range /64 for each interface

3/. using your router to obtain your external IPv6 address

4/. WAN interface assign a /64 address with the router as your gateway

5/. check the XG RA settings

6/. create a IPv6 NAT until V20 EAP is released

7/. create IPv6 firewall rules

Ian

I'll try that while I wait for v20, thanks

Hi,

that is a basic setup I have except for the WAN. Warning XG does not accept IPv6 FQDN.

Ian

Will IPv6 BGP routing be available in v20?

I just bought two XGS2300 to upgrade my aging SG230 cluster for my BGP edge router and firewall. I didn't realize the firewall platform was behind the UTM platform on IPv6 support. That's a big bummer considering we are being forced out of our SG appliances now.