IPv4 and IPv6 Internet and WAN Settings
53
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Note:
You can configure only one WAN interface for IPv6. This restriction
might be lifted in a later release. You can configure the other three
WAN interfaces for IPv4.
The nature of your IPv6 network determines how you need to configure the IPv6 Internet
connections:
•
Native IPv6 network
. Your network is a native IPv6 network if the VPN firewall has an
IPv6 address and is connected to an IPv6 ISP and if your network consists of IPv6-only
devices. However, because we are in a IPv4-to-IPv6 transition period, native IPv6 is not
yet common.
•
Isolated IPv6 network
. If your network is an isolated IPv6 network that is not connected
to an IPv6 ISP, you need to make sure that the IPv6 packets can travel over the IPv4
Internet backbone; you do this by enabling automatic 6to4 tunneling (see
Configure 6to4
Automatic Tunneling
on page
64).
•
Mixed network with IPv4 and IPv6 devices
. If your network is an IPv4 network that
consists of both IPv4 and IPv6 devices, you need to make sure that the IPv6 packets can
travel over the IPv4 intranet; you do this by enabling and configuring ISATAP tunneling
(see
Configure ISATAP Automatic Tunneling
on page
65).
Note:
A network can be both an isolated IPv6 network and a mixed
network with IPv4 and IPv6 devices.
After you have configured the IPv6 routing mode (see the next section), you need to
configure one or more WAN interfaces with a global unicast address to enable secure IPv6
Internet connections on your VPN firewall. A global unicast address is a public and routable
IPv6 WAN address that can be statically or dynamically assigned. The web management
interface offers two connection configuration options:
•
Automatic configuration of the network connection (see
Use a DHCPv6 Server to
Configure an IPv6 Internet Connection
on page
55)
•
Manual configuration of the network connection (see
Configure a Static IPv6 Internet
Connection
on page
58 or
Configure a PPPoE IPv6 Internet Connection
on page
61)
Configure the IPv6 Routing Mode
By default the VPN firewall supports IPv4 only. To use IPv6, you need to enable the VPN
firewall to support both devices with IPv4 addresses and devices with IPv6 addresses. The
routing mode does not include an IPv6-only option; however, you can still configure a native
IPv6 network if your ISP supports IPv6.