Page 51 / 469 Scroll up to view Page 46 - 50
IPv4 and IPv6 Internet and WAN Settings
51
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Figure 26.
3.
Click the
Information
option arrow in the upper right of a DNS screen for registration
information (for example, DynDNS Information).
Figure 27.
4.
Access the website of the DDNS service provider, and register for an account (for example,
for DynDNS.org, go to
).
Page 52 / 469
IPv4 and IPv6 Internet and WAN Settings
52
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
5.
Configure the DDNS service settings as described in the following table:
6.
Click
Apply
to save your configuration.
Configure the IPv6 Internet Connection and WAN
Settings
Configure the IPv6 Routing Mode
Use a DHCPv6 Server to Configure an IPv6 Internet Connection
Configure a Static IPv6 Internet Connection
Configure a PPPoE IPv6 Internet Connection
Configure 6to4 Automatic Tunneling
Configure ISATAP Automatic Tunneling
View the Tunnel Status and IPv6 Addresses
Configure Stateless IP/ICMP Translation
Table 8.
DDNS service settings
Setting
Description
WAN1 (... Status: ...)
Select the
Yes
radio button to enable the DDNS service. The fields that display on the screen depend on
the DDNS service provider that you have selected. Enter the following settings:
Host and Domain Name
The host and domain name for the DDNS service.
Username or
User Email Address
The user name or email address for DDNS server authentication.
Password or User Key
The password that is used for DDNS server authentication.
Use wildcards
If your DDNS provider allows the use of wildcards in resolving your URL, you
can select the
Use wildcards
check box to activate this feature. For example,
the wildcard feature causes *.yourhost.dyndns.org to be aliased to the same IP
address as yourhost.dyndns.org.
Update every 30 days
If your WAN IP address does not often change, you might need to force a
periodic update to the DDNS service to prevent your account from expiring. If
the
Update every 30 days
check box displays, select it to enable a periodic
update.
WAN2 (... Status: ...)
WAN3 (... Status: ...)
WAN4 (... Status: ...)
See the information for WAN1 about how to enter the settings. You can select different DDNS services for
different WAN interfaces.
Page 53 / 469
IPv4 and IPv6 Internet and WAN Settings
53
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Note:
You can configure only one WAN interface for IPv6. This restriction
might be lifted in a later release. You can configure the other three
WAN interfaces for IPv4.
The nature of your IPv6 network determines how you need to configure the IPv6 Internet
connections:
Native IPv6 network
. Your network is a native IPv6 network if the VPN firewall has an
IPv6 address and is connected to an IPv6 ISP and if your network consists of IPv6-only
devices. However, because we are in a IPv4-to-IPv6 transition period, native IPv6 is not
yet common.
Isolated IPv6 network
. If your network is an isolated IPv6 network that is not connected
to an IPv6 ISP, you need to make sure that the IPv6 packets can travel over the IPv4
Internet backbone; you do this by enabling automatic 6to4 tunneling (see
Configure 6to4
Automatic Tunneling
on page
64).
Mixed network with IPv4 and IPv6 devices
. If your network is an IPv4 network that
consists of both IPv4 and IPv6 devices, you need to make sure that the IPv6 packets can
travel over the IPv4 intranet; you do this by enabling and configuring ISATAP tunneling
(see
Configure ISATAP Automatic Tunneling
on page
65).
Note:
A network can be both an isolated IPv6 network and a mixed
network with IPv4 and IPv6 devices.
After you have configured the IPv6 routing mode (see the next section), you need to
configure one or more WAN interfaces with a global unicast address to enable secure IPv6
Internet connections on your VPN firewall. A global unicast address is a public and routable
IPv6 WAN address that can be statically or dynamically assigned. The web management
interface offers two connection configuration options:
Automatic configuration of the network connection (see
Use a DHCPv6 Server to
Configure an IPv6 Internet Connection
on page
55)
Manual configuration of the network connection (see
Configure a Static IPv6 Internet
Connection
on page
58 or
Configure a PPPoE IPv6 Internet Connection
on page
61)
Configure the IPv6 Routing Mode
By default the VPN firewall supports IPv4 only. To use IPv6, you need to enable the VPN
firewall to support both devices with IPv4 addresses and devices with IPv6 addresses. The
routing mode does not include an IPv6-only option; however, you can still configure a native
IPv6 network if your ISP supports IPv6.
Page 54 / 469
IPv4 and IPv6 Internet and WAN Settings
54
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
These are the options:
IPv4-only mode
. The VPN firewall communicates only with devices that have IPv4
addresses.
IPv4/IPv6 mode
. The VPN firewall communicates with both devices that have IPv4
addresses and devices that have IPv6 addresses.
Note:
IPv6 always functions in classical routing mode between the WAN
interface and the LAN interfaces; NAT does not apply to IPv6.
Note:
When the Load Balancing Mode radio button is selected in the Load
Balancing Settings section of the WAN Mode screen, the IPv4 / IPv6
mode radio button is dimmed, preventing you from selecting it. You
can select the IPv4 / IPv6 mode radio button only when the Primary
WAN Mode radio button is selected.
To configure the IPv6 routing mode:
1.
Select
Network Configuration > WAN Settings > WAN Mode
.
The WAN Mode screen
displays:
Figure 28.
2.
In the Routing Mode section of the screen, select the
IPv4 / IPv6 mode
radio button. By
default, the IPv4 only mode radio button is selected, and IPv6 is disabled.
Page 55 / 469
IPv4 and IPv6 Internet and WAN Settings
55
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
WARNING:
Changing the IP routing mode causes the VPN firewall to reboot.
3.
Click
Apply
to save your changes.
Use a DHCPv6 Server to Configure an IPv6 Internet
Connection
The VPN firewall can autoconfigure its ISP settings through a DHCPv6 server by using either
stateless or stateful address autoconfiguration:
Stateless address autoconfiguration
. The VPN firewall generates its own IP address
by using a combination of locally available information and router advertisements, but
receives DNS server information from a DHCPv6 server.
Router advertisements include a prefix that identifies the subnet that is associated with
the WAN port. The IP address is formed by combining this prefix and the MAC address of
the WAN port. The IP address is a dynamic address.
As an option for stateless address autoconfiguration, the ISP’s
stateful
DHCPv6 server
can assign a prefix through prefix delegation. The VPN firewall’s own
stateless
DHCPv6
server can assign this prefix to its IPv6 LAN clients. For more information about prefix
delegation, see
Stateless DHCPv6 Server With Prefix Delegation
on page
103.
Stateful address autoconfiguration
. The VPN firewall obtains an interface address,
configuration information such as DNS server information, and other parameters from a
DHCPv6 server. The IP address is a dynamic address.
To automatically configure a WAN interface for an IPv6 connection to the Internet:
1.
Select
Network Configuration > WAN Settings > WAN Setup
.
2.
In the upper right of the screen, select the
IPv6
radio button. The WAN Setup screen
displays the IPv6 settings:
Figure 29.

Rate

3.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top