# Add IPv6 addresses to Single Firewall interfaces

You can add IPv6 addresses to layer 3 physical interfaces, VLAN interfaces, SSID interfaces, tunnel interfaces, and port group interfaces of an integrated switch on Single Firewalls.

##

Dynamic IPv6 addresses are supported on layer 3 physical interfaces, VLAN interfaces, and port group interfaces. Dynamic IP addresses are not supported on Aggregated Link interfaces.

Note: If you have added VLAN interfaces to physical interfaces, you must add the IPv6 Addresses to the VLAN interfaces.

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. Right-click a Single Firewall, then select Edit Single Firewall.
2. Browse to Interfaces.
3. Right-click a layer 3 physical interface, VLAN interface, SSID interface, tunnel interface, or port group interface, then select New > IPv6 Address.
4. Configure the IP address information in one of the following ways:
   - Select Static, then enter the IPv6 Address. The Network Settings are automatically entered.
     Tip: To resolve the IP address from a DNS name, right-click the field, then select Resolve From DNS Name.
   - (Physical, VLAN, and port group interfaces only) Select Dynamic, then select the DHCP index from the Dynamic Index drop-down list. The index is used for identification in other parts of the configuration (such as Firewall Policies) to represent the possibly changing IP address.
5. (Dynamic IPv6 addresses only) If necessary, define the contact address information.
   - Enter the Default contact address or select Dynamic (next to the Default field) if the interface has a dynamic contact address. The Default contact address is used by default whenever a component that belongs to another Location connects to this interface.
   - If components from some Locations cannot use the Default contact address, click Exceptions to define Location-specific contact addresses.
   - Dynamic contact addresses are not supported on SSID interfaces.
6. (Static IPv6 addresses only) Check the automatically filled-in Prefix Length, then adjust it if necessary.
7. (Optional) Configure additional features for this interface:
   - (Dynamic IPv6 addresses only) If you do not want a default route to be created through the interface, deselect Automatic Default Route.
   - (Dynamic IPv6 addresses only) If you want to use DHCPv6 to get the IPv6 address, select Use DHCPv6 to get IPv6 Address.
8. Click OK.
9. Click Save.
10. Continue the configuration in one of the following ways:
    - Define Modem interfaces.
    - If you are creating a Firewall, or if you want to change the roles the different interfaces have in the configuration, select system communication roles for firewall interfaces.
    - If you added IP addresses to tunnel interfaces, define routing for the route-based VPNs.

## IP Address Properties dialog box (Single Firewall interface)

Use this dialog box to define the properties of an IP address for a Firewall interface.

Option | Definition
--- | ---
IP Address type | If the interface has a static IP address, select Static. If the interface has a dynamic IP address, select Dynamic.

Option | Definition
--- | ---
When Static is selected
IPv4 Address or IPv6 Address | Enter the IPv4 address or IPv6 address.
Contact Addresses section (IPv4 addresses only) | Default — Used by default whenever a component that belongs to another Location connects to this interface. Exceptions — Opens the Exceptions dialog box.
Network Settings section | Netmask — (IPv4 addresses only) Automatically populated IP address or netmask length (1–32). You can change this value if needed. Prefix Length — (IPv6 addresses only) Automatically filled-in length. Adjust it if necessary by entering a value between 0–128. Network Address — The network address is automatically filled in and cannot be edited. Broadcast IP Address — (IPv4 addresses only) The broadcast IP address is automatically filled in and cannot be edited.
Comment | Adds a comment to the IP address.
VRRP Settings (IPv4 addresses only) | Opens the VRRP Settings dialog box.

Option | Definition
--- | ---
When Dynamic is selected
Dynamic Index | Select the number to identify the DHCP interface.
Contact Addresses section | Dynamic — Used when interface has a dynamic contact address. Exceptions — Opens the Exceptions dialog box.
Comment | Adds a comment to the IP address.
Automatic Default Route | Enables the automatic creation of a default route for the interface.
PPP Settings (IPv4 addresses only) | Opens the PPP Settings dialog box.
IPv6 Settings section (IPv6 addresses only) | Use DHCPv6 to get IPv6 Address — When selected, the engine uses DHCPv6 to get the IPv6 address. By default, IPv6 addresses are acquired using Stateless Address Autoconfiguration (SLAAC).

## Resolve IP Address From DNS Name dialog box

Use this dialog box to resolve an IP address from a DNS name.

Option | Definition
--- | ---
DNS Name | The DNS name that you want to resolve.
Resolve | Select to display a list of IP addresses that the DNS name resolves to. Note: The IP addresses are resolved by the computer running the Management Client.
IP Address | Select the IP address that you want to use.