>
    Enable IPv6 Networking for Service Connections
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Advanced Deployments
    4. IPv6 Support for Private App Access
    5. Enable IPv6 Networking for Service Connections
    Download PDF
    Prisma Access

    Enable IPv6 Networking for Service Connections

    Table of Contents

    Enable IPv6 Networking for Service Connections

    Enable IPv6 networking for service connections in a Prisma Access deployment.
    Where Can I Use This?
    What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    • Prisma Access
       license version 2.2 Preferred and later
    • Native IPv6 access to public and private apps requires the following minimum releases:
      • Prisma Access (Managed by Strata Cloud Manager)
        : June 2024 release
      • Prisma Access (Managed by Panorama)
        :
        Prisma Access
         5.1.1 for new deployments only.
      Any other deployments (including existing
      Prisma Access (Managed by Panorama)
       deployments) support private app access only.
    For service connections, you can use IPv6 subnets for static or BGP routing. For BGP routing, you can enter IPv6 peer addresses and specify IPv4 and IPv6 routing options.
    To configure IPv6 networking for service connections, complete the following task.

    Enable IPv6 Networking for Service Connections (
    Strata Cloud Manager
    )

    1. Select
      Manage
      Service Connections
      Service Connections Setup
      .
      If you're using Strata Cloud Manager, go to
      Workflows
      Prisma Access Setup
      Service Connections
      and
      Add Service Connection
      .
    2. Add a new service connection or select an existing service connection to edit it.
    3. Set up IPv6 routing for the service connection.
      1. (
        Static Routing Deployments Only
        ) Enter one or more
        Corporate Subnets
         in the
        Static Routes
         tab.
      2. (
        BGP Routing Deployments Only
        ) Specify the method to exchange IPv4 and IPv6 BGP routes; then, enter an IPv6
        Peer Address
         and
        Local Address
        .
        • To use a single IPv4 BGP session to exchange both IPv4 and IPv6 BGP peering information, select
          Exchange both IPv4 and IPv6 routes over IPv4 peering
          .
        • To an IPv4 BGP session to exchange IPv4 BGP peering information and an IPv6 session to exchange IPv6 BGP peering information, select
          Exchange IPv4 routes over IPv4 peering and IPv6 routes over IPv6 peering
          .
        • To use a single IPv6 BGP session to exchange IPv6 BGP peering information, select
          Exchange IPv6 routes over IPv6 peering
          .
      3. If your secondary WAN uses a different peer or local address, deselect
        Same as Primary WAN
         and enter the IPv6
        Peer Address
         and
        Local Address
         for the secondary WAN.
    4. If you have not yet completed the your service connection setup, complete it now. See Configure a Service Connection in for details.
      IPv6 internet access for service connections is enabled by an underlay connection, in which IPv6 traffic is passed through an IPv4 tunnel.
    5. Push Config
       to deploy your changes to you network.
    6. If you have not yet completed the mobile users configuration, complete it now.

    Enable IPv6 Networking for Service Connections (
    Panorama
    )

    Enable IPv6 networking for service connections in a Prisma Access deployment.
    1. Select
      Panorama
      Cloud Services
      Configuration
      Service Connection
      .
    2. Add
       a new service connection or select an existing service connection to edit it.
    3. Set up IPv6 routing for the service connection.
      1. (
        Static Routing Deployments Only
        ) Enter one or more
        Corporate Subnets
         in the
        Static Routes
         tab.
      2. (
        BGP Routing Deployments Only
        ) Specify the method to exchange IPv4 and IPv6 BGP routes; then, enter an IPv6
        Peer Address
         and
        Local Address
        .
        • To use a single IPv4 BGP session to exchange both IPv4 and IPv6 BGP peering information, select
          Exchange both IPv4 and IPv6 routes over IPv4 peering
          .
        • To an IPv4 BGP session to exchange IPv4 BGP peering information and an IPv6 session to exchange IPv6 BGP peering information, select
          Exchange IPv4 routes over IPv4 peering and IPv6 routes over IPv6 peering
          .
        • To use a single IPv6 BGP session to exchange IPv6 BGP peering information, select
          Exchange IPv6 routes over IPv6 peering
          .
      3. If your secondary WAN uses a different peer or local address, deselect
        Same as Primary WAN
         and enter the IPv6
        Peer Address
         and
        Local Address
         for the secondary WAN.
    4. If you have not yet completed the your service connection setup, complete it now. See Configure a Service Connection in Prisma Access for details.
    5. Commit and Push
       your changes.
    6. Select
      Panorama
      Cloud Services
      Status
      Network Details
      Service Connection
       and make a note of the IPv6
      User-ID Agent Address
       and
      EBGP Router
       addresses.
      After you commit your changes, you will have an IPv6
      User-ID Agent Address
       (used for User-ID retrieval and distribution) and
      EBGP Router
       addresses for service connections.
      Because the IPSec tunnel used for the service connection uses IPv4 addressing, the
      Service IP Address
       is an IPv4 address.
      IPv6 internet access for service connections is enabled by an underlay connection, in which IPv6 traffic is passed through an IPv4 tunnel.
    7. If you have not yet completed the mobile users configuration, complete it now.

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.