The main use of "Enabling IPv6" in GAIA portal

[LeeBingKang]

Hi all,

Recently, I saw there is an option about IPv6 support, and I'm wondering if the security gateway will not accept all the incoming IPv6 packet if it still in "Off" status? Is the firewall will have additional feature if I turn it on?

[Chris_Atkinson]

IPv6 is automatically enabled, if you configure IPv6 addresses in the Gaia First Time Configuration Wizard.

If you did not configure IPv6 addresses, you can manually enable the IPv6 support in Gaia later when needed.

Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Top...

[LeeBingKang]

Hi Chris,

Thanks for your reply. Is the firewall won't inspect and auto drop those ipv6 packet if we didn't enable the IPv6 support on the firewall?

[Chris_Atkinson]

After enabling, IPv6 support is not available until you reboot.

[LeeBingKang]

Dear Chris,

I understand that IPv6 support is not available until you reboot. 

However, I wonder if there is any ipv6 packet pass through a firewall which didn't enable IPv6 support, will packet dropped directly without inspection or how?

Thank you. 

[Chris_Atkinson]

How would they route/forward traffic if the configuration and interfaces are not set?

[LeeBingKang]

Okay. I got your point now whererby firewall can't handle any ipv6 related traffics if the IPv6 support no "ON".

Thank you.

[PhoneBoy · Accepted solution]

The checkbox in the Gaia WebUI enables the IPv6 network stack and kernel modules relevant to securing IPv6 traffic.
Without this, no IPv6 traffic will pass.

[LeeBingKang]

HI PhoneBoy,

Thank you for your feedback and I'm getting clearer about the use of the "IPv6 support" in the Gaia portal now. 

[Softwhere]

Hi @ phoneboy,

is it possible in GAIA R81.10 to configure vpn site-site using ipv6 on one site and ipv4 on the other?

Customer would like to have a Mobile Internet connection as backup, and can only get a ipv6 Address.

Thanks,

Jeff