Enable IPv6 Networking for Service Connections (

Panorama

)

Select
Panorama
Cloud Services
Configuration
Service Connection
.
Add
a new service connection or select an existing service connection to edit it.
Set up IPv6 routing for the service connection.
(

Static Routing Deployments Only

) Enter one or more

Corporate Subnets

in the

Static Routes

tab.

(

BGP Routing Deployments Only

) Specify the method to exchange IPv4 and IPv6 BGP routes; then, enter an IPv6

Peer Address

and

Local Address

.

To use a single IPv4 BGP session to exchange both IPv4 and IPv6 BGP peering information, select
Exchange both IPv4 and IPv6 routes over IPv4 peering
.
To an IPv4 BGP session to exchange IPv4 BGP peering information and an IPv6 session to exchange IPv6 BGP peering information, select
Exchange IPv4 routes over IPv4 peering and IPv6 routes over IPv6 peering
.
To use a single IPv6 BGP session to exchange IPv6 BGP peering information, select
Exchange IPv6 routes over IPv6 peering
.

If your secondary WAN uses a different peer or local address, deselect

Same as Primary WAN

and enter the IPv6

Peer Address

and

Local Address

for the secondary WAN.
If you have not yet completed the your service connection setup, complete it now. See Configure a Service Connection in Prisma Access for details.
Commit and Push
your changes.
Select
Panorama
Cloud Services
Status
Network Details
Service Connection
and make a note of the IPv6
User-ID Agent Address
and
EBGP Router
addresses.
After you commit your changes, you will have an IPv6
User-ID Agent Address
(used for User-ID retrieval and distribution) and
EBGP Router
addresses for service connections.
Because the IPSec tunnel used for the service connection uses IPv4 addressing, the
Service IP Address
is an IPv4 address.
IPv6 internet access for service connections is enabled by an underlay connection, in which IPv6 traffic is passed through an IPv4 tunnel.
If you have not yet completed the mobile users configuration, complete it now.