Enable IPv6 Networking for a Mobile Users—GlobalProtect Deployment

Plan if you want to deploy IPv6 across your entire Prisma Access deployment, or for only a certain number of compute locations.
Configure IPv6 availability for the regions where you want to deploy IPv6.
In the

IPv6 Availability

tab,

Enable IPv6

for the locations for which you want to enable IPv6.

All locations are associated to a compute location. If locations in a compute location do not have IPv6 enabled, leave that compute location deselected.


(
Optional
) If your internal DNS servers use are reachable by IPv6 addresses, click the
Network Services
tab,
Add
a rule or specify the default rule, and specify
Custom DNS Server
IPv6 addresses for the
Primary DNS
and
Secondary DNS
server.
If you enter IPv6 addresses for DNS servers, you must also have IPv6 addresses in your mobile user IP address pool.
You can enter any combination of IPv4 or IPv6 addresses for primary and secondary DNS servers. If you enter an IPv6 address for the primary DNS server and an IPv4 address for the secondary DNS server, and a DNS query is received from a compute location that does not have
IPv6 Availability
enabled, Prisma Access uses the secondary DNS server because it uses an IPv4 address.
IPv4 addresses use A records, while IPv6 addresses use AAAA records. Some DNS servers can perform AAAA DNS lookups over IPv4 transport; therefore, you might not need a server with an IPv6 IP address.

(
Optional
) If you have not yet completed the your mobile users configuration, complete it now. See Set Up GlobalProtect on Panorama Managed Prisma Access for details.
Commit and Push
your changes.