D-Link DFL-1660 User Manual page 98

3.2. IPv6 Support
Command-Line Interface
First, change the CLI context to be the main routing table:
gw-world:/> cc RoutingTable main
Add the IPv6 route:
gw-world:/main> add Route6 Network=my_ipv6_net
Lastly, return to the default CLI context:
gw-world:/main> cc
gw-world:/>
Web Interface
1. Go to: Routing > Routing Tables > main > Add > Route6
2. Now enter:
• Interface: If1
• Network: my_ipv6_net
3. Go to Proxy ND and move the interface If3 from Available to Selected
4. Click OK
Troubelshooting IPv6 with ICMP Ping
The CLI command ping can be used for both IPv4 and IPv6 addresses. For example:
gw-world:/> ping 2001:DB8::2
This provides the means to determine if an IPv6 host is reachable and responding.
Outgoing ICMP messages from the firewall do not require an IP rule which allows them since the
gateway is trusted. However, if the firewall is to be pinged by an external host then an IP rule must
be set up to allow this. Such an IP rule would use the predefined Service object called
ping6-inbound The service object called all_icmpv6 covers all IPv6 ICMP messages except mobile
ICMP messages.
IPv6 Usage Restrictions
The following is a summary of IPv6 restrictions in the current version of NetDefendOS:
• Management access with any NetDefendOS management interface is not possible using IPv6.
• IP rules using IPv4 and IPv6 addresses can coexist in the same IP rule set but a single rule
cannot combine IPv4 and IPv6.
• IPv6 addresses are not currently supported in IP rules with the following actions:
i. NAT
ii. SAT
iii. SLB SAT
Interface=If1
ProxyNDInterfaces=If3
98
Chapter 3. Fundamentals