Modifying An Ethernet Interface (In Bridge Mode); Modifying An Ethernet Interface (Advanced Mode) - Stormshield SN series Configuration Manual

IPv6 address

Modifying an Ethernet interface (in bridge mode)

Address range
Hybrid resolution
IPv6 address range
IP address
Net Mask
Comments
Several IP addresses (aliases) can be added in the same address range on an interface. In this
case, these addresses must all have the same mask.
"Advanced properties" tab
Routing without analyzing
Authorize without
analyzing
For each of the interfaces included in a bridge, you must unselect the option Authorize
without analyzing for IPv6 in order for filtering to be applied on this traffic.

Modifying an Ethernet interface (advanced mode)

To configure an interface in a network that does not belong to a bridge, simply remove it from the
tree structure of the bridge by dragging it with the mouse.
During this detachment, the address range window will appear.
IPv4 address
IPv6 address
Once the interface is outside the bridge, you will be able to access the parameters of the interface
described in the chapter "Modifying an Ethernet interface (in bridge mode)".
Page 377/448
When this option is selected, the bridge will have a static IPv6 address. Enter this
address and its associated network mask in CIDR notation (example:
2001:db8::70/32), in the field below the checkbox.
When this option is selected, the interface must have at least an IPv4 address
(dynamic or static) and an IPv6 address (static). In this case, you will need to indicate
these IP addresses and their associated network mask in the tables "IPv4 address
range" and "IPv6 address range".
IP address assigned to the interface.
Mask of the sub-network to which the interface belongs. The network mask provides
the firewall with information about the network to which it belongs.
Allows adding comments on the address range of the interface.
Allows IPv6 packets to move between the interfaces of the bridge. No higher scan or
filter will then be applied on this protocol.
IMPORTANT
When this option is selected, the bridge will have an IPv4 address. If this address is
static, this has to be indicated (followed by it network mask) in the field below the
checkbox. By default, a dynamic address will be assigned to it via DHCP.
When this option is selected, the bridge will have a static IPv6 address. Enter this
address and its associated network mask in CIDR notation (example:
2001:db8::70/32), in the field below the checkbox.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
IPV6 SUPPORT