End-of-Life (EoL)

IPv6 for GlobalProtect

GlobalProtect clients and satellites can now connect to portals and gateways using IPv6. This feature allows connection from clients that are in IPv6-only environments, IPv4-only environments, or dual-stack (IPv4 and IPv6) environments. The tunnel endpoints are IPv6 capable and IPv6 user traffic can be routed through the tunnel. You can encapsulate IPv4 traffic within an IPv6 tunnel and the IP address pool can assign both IPv4 and IPv6 addresses. This feature requires you to install a GlobalProtect subscription on any portal or gateway that uses IPv6.
IPv6.png
IPv6 uses 16-byte hexadecimal number fields separated by colons (:) to represent the 128-bit addressing format. For example,
2001:db8:130D:0000:0000:09F0:876A:130B
.
To make an IPv6 address easier to represent, IPv6 uses the following conventions to shorten the address:
  • Leading zeros in the address field are optional. For example, the following hexadecimal numbers can be represented as shown:
  • 0000
    (expanded) can be represented as
    0
    (compressed)
  • 2001:db8:130D:0000:0000:09F0:876A:130B
    (expanded) can be represented as
    2001:db8:130D:0:0:9F0:876A:130B
    (compressed)
  • A pair of colons (
    ::
    ) represents successive fields of zeros. The pair of colons can be used only once in an IPv6 address. For example:
  • E2001:db8:130D:0:0:9F0:876A:130B
    (expanded) can be represented as
    2001:db8:130D::9F0:876A:130B
    (compressed)
  • DD01:0:0:0:0:0:1
    (expanded) can be represented as
    DD01::1
    (compressed)
An address parser can easily identify the number of missing zeros in an IPv6 address by separating the two parts of the address and filling in the zeros until the 128-bit address is complete. However, if two colons (
::
) are placed in the same address, then there is no way to identify the size of each block of zeros. The use of colons makes many IPv6 addresses very small.
  1. Before you configure an IP address, select the type of GlobalProtect connection you want to configure.
    Select the type of GlobalProtect connection you want to configure. This can include connections to the GlobalProtect portal, GlobalProtect internal gateways, GlobalProtect external gateways, authentication server IP pools, and tunnel interfaces to satellites.
  2. Navigate to
    Network Settings
    for the connection type.
    For portal and gateway configurations,
    Network Settings
    are located on the
    General
    tab. For satellite configurations, there is a
    Network Settings
    tab.
    1. Choose the
      IP Address Type
      from the drop down. The IP address type can be
      IPv4
      (for IPv4 traffic only),
      IPv6
      (for IPv6 traffic only, or
      IPv4 and IPv6
      . Use
      IPv4 and IPv6
      if your network supports dual stack configurations, where IPv4 and IPv6 run at the same time.
    2. Enter the
      IP Address
      . The IP address you enter must be compatible with the IP address type. For example,
      172.16.1/0
      for IPv4 addresses or
      21DA:D3:0:2F3B
      for IPv6 addresses. For dual stack configurations, enter both an IPv4 and IPv6 address.

Recommended For You