How to enable IPV6 in SRX?

If you look at the following command’s output in an SRX device, you will possibly see the following output

root@srx> show security flow status
  Flow forwarding mode:
    Inet forwarding mode: flow based
    Inet6 forwarding mode: drop
    MPLS forwarding mode: drop
    ISO forwarding mode: drop
  Flow trace status
    Flow tracing status: off
  Flow session distribution
    Distribution mode: RR-based

As you can see Inet6 is dropped by default. To enable it issue the following command

#set security forwarding-options family inet6 mode flow-based

If you commit this config change, you will be asked to reboot the device. Once reboot is done, output will change like below after which you can play with ipv6:)

root@srx> show security flow status
  Flow forwarding mode:
    Inet forwarding mode: flow based
    Inet6 forwarding mode: flow based
    MPLS forwarding mode: drop
    ISO forwarding mode: drop
  Flow trace status
    Flow tracing status: off
  Flow session distribution
    Distribution mode: RR-based

PS: If your SRX isn’t in flow mode but packet mode instead, command should be as below to enable ipv6

set security forwarding-options family inet6 mode packet-based
Tags:

About: rtoodtoo

Worked for more than 10 years as a Network/Support Engineer and also interested in Python, Linux, Security and SD-WAN // JNCIE-SEC #223 / RHCE / PCNSE


You have a feedback?

Discover more from RtoDto.net

Subscribe now to keep reading and get access to the full archive.

Continue reading