IPv6 DHCP-PD Support

Hi Todd,

Good question. There is no specific immediate plans, as we already support DHCP v6.  

Thanks

Sachin Gurung

Hello Sachin,

I respectfully disagree that Sophos XG supports DHCPv6.   Please reference RFC 3633.  https://www.ietf.org/rfc/rfc3633.txt

I am certain this is common knowledge that DHCPv6 is different from DHCPv4.  In comparison to other firewall vendors, prefix delegation is available in DHCPv6.

Thank you.

Hello Sachin,

I respectfully disagree that Sophos XG supports DHCPv6.   Please reference RFC 3633.  https://www.ietf.org/rfc/rfc3633.txt

I am certain this is common knowledge that DHCPv6 is different from DHCPv4.  In comparison to other firewall vendors, prefix delegation is available in DHCPv6.

Thank you.

Hi,

IPv6 in home environment.

1/. Enable Iv6 on your external interface.

2/. You can while waiting for PD to be added use any IPv6 address range you like because the current XG (V18 GA)  requires a NAT, no option. I expect a LAN to LAN IPv6 rule will also require a NAT, I haven't tried yet.

3/. examine the externalIPv6 address assigned to your external interface and from there you should be able to work out what /56 has been assigned to you. My Austraian ISP has a reasonably stable IPv6 assignment and I use the /64 from the /56 internally.

4/. setup your firewall rules and do not forget the NAT otherwise no internet access.

5/. the limitation at this stage is FQDN groups which I haven't tried in the V18 GA yet.

ian

Hello rfcat_vk,

what must the rules for NAT look like?

Hi Christos,

are you using V178 or V18? If v17 then you click MASQ in your firewall rule, if using v18 then you need to create a linked NAT rule and change to MASQ and don't forget to see both rules.

Ian