Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Route IPv6 to DMZ

Hi there,

we have a /64 subnet (with gateway) and a /56 assigned by the ISP. No PD in place.
I've assigned an address from the /64 subnet together with the gateway to the WAN interface, which is now reachable via IPv6.

I'd like to assign IPv6 Addresses to the servers in our DMZ too.
How can I do that?

I'm not really clear about why I need two subnets and what to do with the /56 subnet.

Any help is appreciated, thanks!



This thread was automatically locked due to age.
Parents
  • Hi,

    the /56 is for your internal use. You assign a /64 to each lan and then assign addresses from that /64 pool.

    ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • Thanks you for your reply.

    Lets say I assign a /64 out of the /56 to the DMZ.
    Assume I have a firewall rule allowing traffic from WAN to DMZ.

    Is this enough or do I have to add any routes or anything else for the server in ths DMZ to be reachable by the IPv6 address?

Reply
  • Thanks you for your reply.

    Lets say I assign a /64 out of the /56 to the DMZ.
    Assume I have a firewall rule allowing traffic from WAN to DMZ.

    Is this enough or do I have to add any routes or anything else for the server in ths DMZ to be reachable by the IPv6 address?

Children