The read-only Interface Name is set to vlan. In the adjacent field, enter a numeric suffix (1 to 9,999) to identify the interface.

Select a VLAN or click VLAN to define a new one (see Network > VLANs). Select None to remove the current VLAN assignment from the interface.

Select the method for assigning an IPv4 address type to the interface:

Based on your IP address method selection, the options displayed in the tab will vary.

Click Add, then perform one of the following steps to specify a static IP address and network mask for the interface.

You can enter multiple IP addresses for the interface. The forwarding information base (FIB) your system uses determines the maximum number of IP addresses.

Delete an IP address when you no longer need it.

Select to activate the DHCP client on the interface.

Select to enable IPv6 addressing on this interface.

Add an IPv6 address and prefix length (for example, 2001:400:f00::1/64). Alternatively, select an existing IPv6 address object or create a new one.

Select to enable the router advertisement (RA) for this IPv6 address. When you select this option, you must also Enable Router Advertisement on the Router Advertisement tab.

The remaining fields apply only if you enable Send RA.

Select to allow the DHCPv6 Client to accept the RA from the DHCP server.

Enable the IPv6 Address received for this DHCPv6 Client.

Enable Prefix Delegation to allow the firewall to support prefix delegation functionality. This means that the interface accepts a prefix from the upstream DHCPv6 server and places the prefix into the Prefix Pool you select, from which the firewall delegates a prefix to a host via SLAAC. The ability to enable or disable prefix delegation for an interface allows the firewall to support multiple ISPs (one ISP per interface). Enabling prefix delegation on this interface controls which ISP provides the prefix. The delegated prefix received from the DHCP server cannot be used on the interface that requested it.

Add a pool by entering a pool Name. The name can be a maximum of 63 alphanumeric characters, hyphens, periods, and underscores.

Select the assignment type:

Select to enable duplicate address detection (DAD), which allows you to specify the number of DAD Attempts.

Select to provide Neighbor Discovery on IPv6 interfaces and configure the other fields in this section. IPv6 DNS clients that receive the router advertisement (RA) messages use this information.

RA enables the firewall to act as a default gateway for IPv6 hosts that are not statically configured and to provide the host with an IPv6 prefix for address configuration. You can use a separate DHCPv6 server in conjunction with this feature to provide DNS and other settings to clients.

This is a global setting for the interface. If you want to set RA options for individual IP addresses, Add an Address to the IP address table and configure it. If you set RA options for any IP address, you must Enable Router Advertisement for the interface.

Specify the link maximum transmission unit (MTU) to apply to clients (range is 1,280 to 1,500) or default to unspecified, which maps to a system default.

Specify the reachable time (in milliseconds) that the client will use to assume a neighbor is reachable after receiving a reachability confirmation message (range is 0 to 3,600,000) or default to unspecified, which maps to a system default.

Select to indicate to the client that other address information (for example, DNS-related settings) is available via DHCPv6.

DNS Support is available if you Enable Router Advertisement on the Router Advertisement tab.

Select for the firewall to send DNS information in NDP router advertisements from this IPv6 Ethernet interface. The other DNS Support fields (Server, Lifetime, Domain Search List, and Lifetime) are visible only after you select this option.

Add one or more recursive DNS (RDNS) server addresses for the firewall to send in NDP router advertisements from this IPv6 Ethernet interface. RDNS servers send a series of DNS look up requests to root DNS and authoritative DNS servers to ultimately provide an IP address to the DNS client.

You can configure a maximum of eight RDNS Servers that the firewall sends—in order listed from top to bottom—in an NDP router advertisement to the recipient, which then uses them in the same order. Select a server and Move Up or Move Down to change the order of the servers or Delete a server from the list when you no longer need it.

Enter the maximum number of seconds after the IPv6 DNS client receives the router advertisement before the client can use an RDNS server to resolve domain names (range is Max Interval (sec) to twice Max Interval (sec); default is 1,200).

Add one or more domain names (suffixes) for the DNS search list (DNSSL). Maximum length is 255 bytes.

A DNS search list is a list of domain suffixes that a DNS client router appends (one at a time) to an unqualified domain name before it enters the name into a DNS query, thereby using a fully qualified domain name in the query. For example, if a DNS client tries to submit a DNS query for the name “quality” without a suffix, the router appends a period and the first DNS suffix from the DNS search list to the name and transmits the DNS query. If the first DNS suffix on the list is “company.com”, the resulting query from the router is for the fully qualified domain name “quality.company.com”.

If the DNS query fails, the router appends the second DNS suffix from the list to the unqualified name and transmits a new DNS query. The router uses the DNS suffixes until a DNS lookup is successful (ignores the remaining suffixes) or until the router has tried all of suffixes on the list.

Configure the firewall with the suffixes that you want to provide to the DNS client router in a Neighbor Discovery DNSSL option; the DNS client receiving the DNSSL option uses the suffixes in its unqualified DNS queries.

You can configure a maximum of 8 domain names (suffixes) for a DNS search list option that the firewall sends—in order listed from top to bottom—in an NDP router advertisement to the recipient, which uses them in the same order. Select a suffix and Move Up or Move Down to change the order or Delete a suffix when you no longer need it.

Enter the maximum number of seconds after the IPv6 DNS client receives the router advertisement that it can use a domain name (suffix) on the DNS search list (range is the value of Max Interval (sec) to twice Max Interval (sec); default is 1,200).

Enable and select:

If you choose Manual, Add a recursive DNS (RDNS) Server address for the firewall to send in NDP router advertisements from this IPv6 VLAN interface. RDNS servers send a series of DNS lookup requests to root DNS servers and authoritative DNS servers to ultimately provide an IP address to the DNS client.

You can configure a maximum of eight RDNS servers that the firewall sends— in the order listed from top to bottom—in an NDP router advertisement to the recipient, which then uses them in the same order. Select a server and Move Up or Move Down to change the order of the servers or Delete a server from the list when you no longer need it.

Enable and select:

If you choose Manual, Add and configure one or more Domain names (suffixes) for the DNS search list (DNSSL). The maximum suffix length is 255 bytes.

A DNS search list is a list of domain suffixes that a DNS client router appends (one at a time) to an unqualified domain name before it enters the name into a DNS query, thereby using a fully qualified domain name in the DNS query. For example, if a DNS client tries to submit a DNS query for the name “quality” without a suffix, the router appends a period and the first DNS suffix from the DNS search list to the name and then transmits the DNS query. If the first DNS suffix on the list is “company.com”, the resulting DNS query from the router is for the fully qualified domain name “quality.company.com”.

If the DNS query fails, the router appends the second DNS suffix from the list to the unqualified name and transmits a new DNS query. The router tries DNS suffixes until a DNS lookup is successful (ignores the remaining suffixes) or until the router has tried all of suffixes on the list.

Configure the firewall with the suffixes that you want to provide to the DNS client router in a Neighbor Discovery DNSSL option; the DNS client receiving the DNSSL option uses the suffixes in its unqualified DNS queries.

You can configure a maximum of eight domain names (suffixes) for a DNS search list that the firewall sends—in order listed from top to bottom—in an NDP router advertisement to the recipient, which uses those addresses in the same order. Select a suffix and Move Up or Move Down to change the order or Delete a suffix from the list when you no longer need it.

Enter the maximum number of seconds after the IPv6 DNS client receives the router advertisement that it can use a domain name (suffix) on the DNS search list (range is the value of Max Interval (sec) to twice the Max Interval; default is 1,200).

Management Profile—Select a profile that defines the protocols (for example, SSH, Telnet, and HTTP) you can use to manage the firewall over this interface. Select None to remove the current profile assignment from the interface.

To add one or more static Address Resolution Protocol (ARP) entries, click Add and enter an IP address, enter its associated hardware [media access control (MAC)] address, and select a Layer 3 interface that can access the hardware address. To delete an entry, select the entry and click Delete. Static ARP entries reduce ARP processing and preclude man-in-the-middle attacks for the specified addresses.

To provide neighbor information for Neighbor Discovery Protocol (NDP), click Add and enter the IPv6 address and MAC address of the neighbor.

Select to enable Neighbor Discovery Protocol (NDP) Proxy for the interface. The firewall will respond to ND packets requesting MAC addresses for IPv6 addresses in this list. In the ND response, the firewall sends its own MAC address for the interface, and is basically saying, “send me the packets meant for these addresses.”

(Recommended) Enable NDP Proxy if you are using Network Prefix Translation IPv6 (NPTv6).

If you Enable NDP Proxy, you can filter numerous Address entries: first enter a filter and then apply it (green arrow).

Select Settings to make the DDNS fields available to configure.

Add the IPv6 addresses configured on the interface and select them. All selected IP addresses are registered with the DDNS provider (Vendor).