GlobalProtect clients and satellites can now connect to portals and gateways using IPv6. This feature allows connection from clients that are in IPv6-only environments, IPv4-only environments, or dual-stack (IPv4 and IPv6) environments. The tunnel endpoints are IPv6 capable and IPv6 user traffic can be routed through the tunnel. You can encapsulate IPv4 traffic within an IPv6 tunnel and the IP address pool can assign both IPv4 and IPv6 addresses. This feature requires you to install a GlobalProtect subscription on any portal or gateway that uses IPv6.
IPv6 uses 16-byte hexadecimal number fields separated by colons (:) to represent the 128-bit addressing format. For example,
To make an IPv6 address easier to represent, IPv6 uses the following conventions to shorten the address:
- Leading zeros in the address field are optional. For example, the following hexadecimal numbers can be represented as shown:
- 0000(expanded) can be represented as0(compressed)
- 2001:db8:130D:0000:0000:09F0:876A:130B(expanded) can be represented as2001:db8:130D:0:0:9F0:876A:130B(compressed)
- A pair of colons (::) represents successive fields of zeros. The pair of colons can be used only once in an IPv6 address. For example:
- E2001:db8:130D:0:0:9F0:876A:130B(expanded) can be represented as2001:db8:130D::9F0:876A:130B(compressed)
- DD01:0:0:0:0:0:1(expanded) can be represented asDD01::1(compressed)
An address parser can easily identify the number of missing zeros in an IPv6 address by separating the two parts of the address and filling in the zeros until the 128-bit address is complete. However, if two colons (
::) are placed in the same address, then there is no way to identify the size of each block of zeros. The use of colons makes many IPv6 addresses very small.
- Before you configure an IP address, select the type of GlobalProtect connection you want to configure.Select the type of GlobalProtect connection you want to configure. This can include connections to the GlobalProtect portal, GlobalProtect internal gateways, GlobalProtect external gateways, authentication server IP pools, and tunnel interfaces to satellites.
- Navigate toNetwork Settingsfor the connection type.For portal and gateway configurations,Network Settingsare located on theGeneraltab. For satellite configurations, there is aNetwork Settingstab.
- Choose theIP Address Typefrom the drop down. The IP address type can beIPv4(for IPv4 traffic only),IPv6(for IPv6 traffic only, orIPv4 and IPv6. UseIPv4 and IPv6if your network supports dual stack configurations, where IPv4 and IPv6 run at the same time.
- Enter theIP Address. The IP address you enter must be compatible with the IP address type. For example,172.16.1/0for IPv4 addresses or21DA:D3:0:2F3Bfor IPv6 addresses. For dual stack configurations, enter both an IPv4 and IPv6 address.
Recommended For You
Recommended videos not found.