The huawei series of firewalls supported ipv6 within most code versions. The Eudemon have been very reliable for ipv6 inspection and filtering. Huawei is a major contender in the Asia market ( China & Japan ) is one of the major consumer of ipv6 address usage.
http://www.huawei.com/en/solutions/broader-smarter/hw-092950-ipv6.htm
To configure ipv6 on a firewall interface, you only need to enable the ipv6 function and set a address. If you want to allow rt-adv for SLAAC clients, you can specify prefix(es) to be advertised.
Here's a few examples of various ipv6 interface configurations;
Single prefix with route-advertisement
Interface with numerous ipv6 addresses
Interface with numerous ipv6 with 2 prefixes RT-advertisements
Interface with numerous ipv6 eui64 address
ipv6 must be enabled globally & if not you will receive the following error
Useful ipv6 display commands
display ipv6 routing-table
display ipv6 interface brief
Ken Felix
NSE ( Network Security Expert) and Route/Switching Engineer.
kfelix -----a----t---- socpuppets ---dot---com
^ ^
=( * * )=
o
/ \
No comments:
Post a Comment