Enabling Ipv6 At The Appliance Level; Dhcp Server - McAfee SG310 Administration Manual

Network Setup menu options

DHCP Server

• A default set of IPv6 packet filter rules are enabled. These IPv6 packet filter rules are stateless, as
opposed to the IPv4 packet filter rules, which are stateful. The default rules only support a single LAN
connection and a single WAN connection. You can customize these rules on the Custom IPv6 Firewall Rules
page. For further information, refer to

Enabling IPv6 at the appliance level

Use this procedure to enable IPv6 routing for the UTM Firewall appliance. You must also enable IPv6 for
each connection that supports IPv6. For instructions, see
From the Network Setup menu, click Network Setup, and then select the IPv6 tab. The IPv6 page
1
appears (Figure
Figure 126 IPv6 page
To enable IPv6 routing and packet filtering, select the Enable IPv6 checkbox.
2
Click Submit.
3
Disabling IPv6
Use this procedure to disable IPv6 at the appliance level. Disabling at the appliance level disables IPv6 for
connections as well even though they are still enabled at the connection level.
From the Network Setup menu, click Network Setup, and then select the IPv6 tab. The IPv6 page
1
appears.
Clear the Enable IPv6 checkbox.
2
Click Submit.
3
DHCP Server
DHCP (Dynamic Host Configuration Protocol) is used for assigning dynamic IP address to devices on a
network. IP addresses are assigned using the concept of a lease, which is the amount of time the IP
address is valid for a device. With DHCP, network administrators can centrally manage and automate the
assignment of IP addresses. DHCP is only available for non-Internet interfaces, such as LAN or DMZ,
defined with static IP addresses.
Note: If an interface itself is defined to use DHCP, that interface cannot act as a DHCP Server or Relay.
You can set up the appliance as either a DHCP Server or a DHCP Relay. When the appliance is configured as
a DHCP server, it assigns addresses for a particular IP address space. When the appliance is configured as
a DHCP relay, the appliance is configured with the IP address of a DHCP server.
If the DHCP server resides on another network (that is, the DHCP Server and the client network are on
opposite sides of a router, it is necessary to set up a DHCP relay since DHCP broadcasts cannot be passed
by the router. DHCP Relay packets have a source and destination IP address; however, DHCP relay does
not support NAT. If the DHCP server and client reside on the same side of a network, set up a DHCP server.
A DHCP server can reside on a different network than the client network. For example, the DHCP server can
have an IP address of 10.10.1.254 and assign addresses in the 192.168.0.0 network.
DHCP is defined by RFC2131. For details, visit the following URL:
http://www.faqs.org/rfcs/rfc2131.html.
The main pages for DHCP in the Management Console are as follows:
• DHCP Status page
McAfee UTM Firewall 4.0.4 Administration Guide
Custom IPv6 Firewall Rules
126).
tab.
Enabling IPv6 for a connection.
123