No ipv6 addresses appears in Log on R80.30

[evlad]

The question is quite simple. We have two Checkpoint Clusters just on front of the Internet. And we never see even one incoming packet from ipv6 source in the Logs. Why? It's very strange. We are constantly suffering heavy buzz from all over the world. It's impossible that no one came from IPV6 address (they should be 10-20% of overall traffic).
I'm sure - we just cannot see them. Something wrong with FW configuration or with the query syntax (I tried search by ::, ::*, 2001::/16, ipv6...)
So the question is: what should be configured on the FWGw (Gaia R80.30) and what the proper query syntax to see all the traffic from ipv6 sources in LOG?

[PhoneBoy]

Let’s start with the obvious question: do you have IPv6 enabled?
It’s not by default and must be explicitly enabled.
Without that, you won’t see any IPv6 traffic at all.

You can also see if you have any active IPv6 connections whatsoever with fw6 tab -t connections 

[evlad]

Thank You so much PhoneBoy!
You are right, we have IPv6 disabled. I just find it now on WebConsole.
So You answered generally to my question, thanks!

But still I have some other questions:
- Is it means that all IPv6 traffic was rejected or dropped  until now?
- IPv6 is not a default option (as You say) but may be this option mentioned in any step of install.  I don't remember, if any choice given for IPv6 when CP Gw installation?
- And at last - I have not find "fw6 tab -t connections" command, where is it?

[PhoneBoy · Accepted solution]

With IPv6 disabled at the OS level, no IPv6 traffic was getting passed as there was no IPv6 stack to do it.
Don't believe IPv6 is mentioned at any point during the install, you must enable it after the fact and configure your security policy appropriately to pass the traffic.

You would enter fw6 tab -t connections on the command line.

[evlad]

Thanks so much!
I didn't find set of fw6 commands on gaia 80 appliance (kind of deprecated commands on this version), but the issue is quite clear now. I've decide to enable IPv6 and watch how it will change the traffic log.

BR,
Evgeni 

[Danny]

Is IPv6 enabled on your gateways?

IPv6 Support FAQ
IPv6 features and limitations starting R80.30

[evlad]

Hi Danny,
No, now I see that it's disabled. Thanks! You all right guys.
I have some other questions that I've wrote in previous reply...