How to enable IPV6 in SRX?

If you look at the following command’s output in an SRX device, you will possibly see the following output

root@srx> show security flow status
  Flow forwarding mode:
    Inet forwarding mode: flow based
    Inet6 forwarding mode: drop
    MPLS forwarding mode: drop
    ISO forwarding mode: drop
  Flow trace status
    Flow tracing status: off
  Flow session distribution
    Distribution mode: RR-based

As you can see Inet6 is dropped by default. To enable it issue the following command

#set security forwarding-options family inet6 mode flow-based

If you commit this config change, you will be asked to reboot the device. Once reboot is done, output will change like below after which you can play with ipv6:)

root@srx> show security flow status
  Flow forwarding mode:
    Inet forwarding mode: flow based
    Inet6 forwarding mode: flow based
    MPLS forwarding mode: drop
    ISO forwarding mode: drop
  Flow trace status
    Flow tracing status: off
  Flow session distribution
    Distribution mode: RR-based

PS: If your SRX isn’t in flow mode but packet mode instead, command should be as below to enable ipv6

set security forwarding-options family inet6 mode packet-based
Tags:

About: rtoodtoo

Genco has worked for more than 10 years as a Network/Support Engineer. He is also interested in Python, Linux, Security and SD-WAN, currently lives in the Netherlands and works as a Network Support Engineer at Tesla Inc. // JNCIE-SEC #223 / RHCE / PCNSE


You have a feedback?

This site uses Akismet to reduce spam. Learn how your comment data is processed.