There hasn't been a lot of talk in the roadmap discussion about the implementation of IPv6 DHCP-PD support on the XG platform. Can we expect to see that at some point in the near future?
This thread was automatically locked due to age.
There hasn't been a lot of talk in the roadmap discussion about the implementation of IPv6 DHCP-PD support on the XG platform. Can we expect to see that at some point in the near future?
Hello Sachin,
I respectfully disagree that Sophos XG supports DHCPv6. Please reference RFC 3633. https://www.ietf.org/rfc/rfc3633.txt
I am certain this is common knowledge that DHCPv6 is different from DHCPv4. In comparison to other firewall vendors, prefix delegation is available in DHCPv6.
Thank you.
Hi,
IPv6 in home environment.
1/. Enable Iv6 on your external interface.
2/. You can while waiting for PD to be added use any IPv6 address range you like because the current XG (V18 GA) requires a NAT, no option. I expect a LAN to LAN IPv6 rule will also require a NAT, I haven't tried yet.
3/. examine the externalIPv6 address assigned to your external interface and from there you should be able to work out what /56 has been assigned to you. My Austraian ISP has a reasonably stable IPv6 assignment and I use the /64 from the /56 internally.
4/. setup your firewall rules and do not forget the NAT otherwise no internet access.
5/. the limitation at this stage is FQDN groups which I haven't tried in the V18 GA yet.
ian
Hi,
IPv6 in home environment.
1/. Enable Iv6 on your external interface.
2/. You can while waiting for PD to be added use any IPv6 address range you like because the current XG (V18 GA) requires a NAT, no option. I expect a LAN to LAN IPv6 rule will also require a NAT, I haven't tried yet.
3/. examine the externalIPv6 address assigned to your external interface and from there you should be able to work out what /56 has been assigned to you. My Austraian ISP has a reasonably stable IPv6 assignment and I use the /64 from the /56 internally.
4/. setup your firewall rules and do not forget the NAT otherwise no internet access.
5/. the limitation at this stage is FQDN groups which I haven't tried in the V18 GA yet.
ian