Virtual Interfaces; Ipsec Interfaces (Vti)" Tab; Loopback" Tab; Routing - Stormshield SN series Configuration Manual

Virtual interfaces

"IPSec interfaces (VTI)" tab

IPv6 address
IPv6 prefix

"Loopback" tab

IPv6 address

Routing

The configuration of IPv6 routing is separated into three segments:
IPv6 static route: allows defining static routes for IPv6 packets. Static routing represents a set
l
of rules defined by the administrator as well as a default route.
IPv6 Bird dynamic routing: Allows configuring dynamic routing protocols (RIP, OSPF, BGP) in
l
an IPv6 Bird engine, in order to allow the firewall to learn routes managed by other appliances.
The BIRD6 dynamic routing engine is dedicated to IPv6 dynamic routing. This configuration
has to be performed in console mode in the files:
/usr/Firewall/ConfigFiles/Bird/global ([bird6] section)
/usr/Firewall/ConfigFiles/Bird/bird6.conf
For more information on the configuration of dynamic routing, please refer to the Technical
Note BIRD Dynamic Routing, available in the Document Base in your personal area.
Static routing and dynamic routing run simultaneously; static routing however has priority for
transmitting packets over the network.

"IPv6 static route" tab

Default gateway
(router)
Button bar
Search
Page 379/448
Indicate the IPv6 address assigned to the IPSec interface.
Indicate the IPv6 prefix associated with the IPSec interface
Indicate the IPv6 address assigned to the loopback interface.
WARNING: Dynamic routing
The default router is generally the equipment which allows your network to access the
Internet. This is the address to which the firewall sends packets that need to go on the
public network. If you do not configure a default router, the firewall would not know
where to direct packets that have a destination address that differs from the networks
directly linked to it. Hosts will therefore not be able to access any other network apart
from their own.
Click on the button to access the object database and select a host. The "Default
gateway" field will be grayed out if a list of gateways has been defined in the
advanced configuration zone.
Search that covers host, network and group objects.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
IPV6 SUPPORT