IPv6 is an evolutionary upgrade to the Internet Protocol. A new Internet addressing system Internet Protocol version 6 (IPv6) is being deployed to fulfill the need for more Internet addresses. IPV6 uses increased length of addresses, from 32 bits in IPv4 to 128 bits in IPv6. This increases the total address space size from 232 (about 4.3 billion) to 2128 (about 340 trillion, trillion, trillion). It also doubles the size of the Packet Header, which adds 20 bytes of additional overhead on every packet.


IPv6 uses "coloned-hex" (e.g. 2001:470:20::2) for external data representation, whereas IPv4 uses "dotted-decimal" (e.g. 123.34.56.78). Both IPv4 and IPv6 addresses are represented internally (in memory, or on the wire) as strings of bits (32 of them for IPv4, 128 of them for IPv6). IPv4 addresses are represented externally with 4 fields of 8 bits each, using up to 3 decimal digits in each field (values 0 to 255). Fields are separated by dots (".").


IPv6 Address Type
Included Range of Addresses
IPv6 Notation
Description
Unspecified Address
0000:0000:0000:0000:0000:0000:0000:0000
::/128
Does not specify a source address (all 128 bits in the IPv6 address set to zeros)
Loopback Address
0000:0000:0000:0000:0000:0000:0000:0001
::1/128
The local host address of a device
Multicast
ff00:0000:0000:0000:0000:0000:0000:0000 - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
FF00::/8
Destined for members of a multicast group
Global Unicast
2000:0000:0000:0000:0000:0000:0000:0000 - 3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
2000::/3
Destined for a single recipient and can be routed on the public Internet
Unique local
Fc00:0000:0000:0000:fc00:0000:0000:0000 - fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
FC00::/7
Cannot be routed on the Public Internet
Link Local
fe80:0000:0000:0000:0000:0000:0000:0000 - fe80:0000:0000:0000:ffff:ffff:ffff:ffff
FE80::/10
Valid only on a network segment



IPv6 addresses are denoted by eight groups of hexadecimal quartets separated by colons in between them.

Following is an example of a valid IPv6 address: 2001:cdba:0000:0000:0000:0000:3257:9652


Any four-digit group of zeroes within an IPv6 address may be reduced to a single zero or altogether omitted. Therefore, the following IPv6 addresses are similar and equally valid:


2001:cdba:0000:0000:0000:0000:3257:9652

2001:cdba:0:0:0:0:3257:9652

2001:cdba::3257:9652


Seqrite UTM supports IPV6 IP format and allows you to enable it. On enabling IPV6 you can use it while configuring the following settings:

  • Interface
  • DNS
  • DHCP
  • Content Filtering (Blacklist / white-list and Domain)


Scenario


Following sections describe how to configure Seqrite Terminator IPv6 functionality.

Enabling IPV6

 1.      Navigate to Network > IPv6. By default IPv6 support is disabled.



2. Toggle the status button to enable IPV6 and click Apply.


Note: You cannot configure any of the settings related to IPv6, unless you enable IPv6 support for the Seqrite UTM.


Configuration


  • Configure IPv6 Interfaces


You can assign both an IPv4 and an IPv6 address to any Interface. Assigning an IPv6 address to the interface does not affect its IPv4 functionality. The IPv6 address you assign to the Interface receives only IPv6- addressed packets.


1. Navigate to Network  >  Interfaces. The Interfaces list is displayed.




2. Click Add to add an interface. To modify an interface, click the interface name in the list. The corresponding settings for the interface are displayed. The following table explains the fields on the page. Configure settings as required.



Note: The fields are displayed based on the corresponding settings, some fields may not be available as per the settings.


Type

Configuration

Interface Name

Set the name of Interface

Zone

Select from LAN, WAN, and DMZ.

IP assignment

This can be Static, Dial up, or DHCP.
If you select the IP assignment as Static then you need to enter the IPV6 address and Subnet mask.
If you select the IP assignment as Dialup then you need to enter the user name and password provided by your ISP.

Note: To view Live Logs for Dial-up service, Go to Logs and Reports > Live Logs. Select the required module(s) and click Export. The logs are exported in a .txt document to your computer. These logs indicate the current status of the selected module.

IPv4 Address

Set IPv4 address for Seqrite UTM, through which all clients will access the Internet.

Subnet mask

This field is displayed if you select IP assignment as Static. Select the appropriate Subnet mask.

This field is displayed if you select IP assignment as Static. Select the appropriate Subnet mask.

IPv4 Gateway

This field is displayed if you select IP assignment as Static. Set the gateway if Seqrite UTM is behind the router.

Note: If gateway is set for WAN interface then for LAN interface gateway cannot be set.

IPv6 Address

This field is displayed if IPv6 is enabled. For more details see IPv6.
Enter the IPv6 address through which all clients will access the Internet.

Prefix

IPv6 Prefix is used to identify how many bits of a Gobal Unicast IPv6 Address are there in network part. For example, in 2001:0DB8:0000:000b::/64,
the number 64 is Prefix and is used to identify that the first 64 bits are in network part.

IPv6 Gateway

This field is displayed if IPv6 is enabled. For more details see IPv6.
Enter the IPv6 Gateway.

User Name

This field is displayed if you select IP assignment as Dialup. Enter the user name provided by ISP.

Password

This field is displayed if you select IP assignment as Dialup Enter the password provided by ISP.

Service Name

This field is displayed if you select IP assignment as Dialup. Enter the Service
name provided by ISP.

Hardware Address

Displays the actual MAC Id for that interface.



3. Click Apply to save changes if any.


Editing an interface


1. Navigate to Network >  Interfaces. The Interfaces list is displayed.

2. Click on the Interface that you want to edit. The edit interface screen is displayed.

3. Correct the Interface name, Zone, IP assignment, IPV4 address, IPV6 address subnet mask and gateway IP address as required.

4. Select the Link check method and Detection IP as required. The link check methods checks if the interface is up and connected. You can configure the method as ICMP or DNS. Seqrite UTM pings the configured DNS or IP to check if the interface is up and connected.

5. If you want this interface to be default route, place a check mark against the option.

6. Enter or correct the Hardware Address as required.

7. Click Apply.


Deleting interfaces


1. Navigate to Network >  Interfaces. The Interfaces list is displayed.

2. Select the Interface that you want to delete and click Delete. A confirmation message is displayed.

3. Click OK to confirm deletion of the interface.


Note: You cannot delete interface eth0. Deleting the interfaces will only clear the configuration / settings, the port will still be displayed in the list.


For assistance please write us @ UTMSupport@Seqrite.com