It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

How to Configure IPv6 Direct Attached Routes

  • Last updated on

Direct attached routes can also be introduced on the box level. These IP addresses are not synced to the HA partner and remain active when a failover occurs. Use Shared IPv6 addresses for remote access and direct attached routes with shared network IP addresses in all other cases.

Direct attached routes are routing entries for networks that can be reached from an interface of the firewall without having to use a next hop gateway.

direct_rtv6.png

Before You Begin

Connect the network to a port of the Barracuda CloudGen Firewall.

Step 1. Configure a Direct IPv6 Route

  1. Go to CONFIGURATION > Configuration Tree > Box > Network.
  2. In the left menu, click Advanced Routing.
  3. Click Lock.
  4. Click + to add a direct attached route to the IPv6 Routing Table:
    • Name – Enter a name.
    • Target Network Address – Enter the IPv6 network. E.g., 2001:db8:10:10::/64
    • Route Type – Select direct attached network.
    • Interface – Select the interface used to connect to the network. E.g., eth0
    • Trust Level – Select the trust level. Your network will automatically be added to the corresponding network objects. Use Untrusted for WAN connections, Trusted for LAN connections. For more information, see Network Objects.
    • Route MetricEnter the preference for the route. When two identical routes are present, the route with the lower preference is used.
    direct_route_ipv6.png
  5. Click OK.
  6. Click Send Changes and Activate.

Step 2. Activate the Network Configuration

After you have configured the network route, you must activate your new network configuration.

  1. Go to CONTROL > Box.
  2. In the left menu, expand Network and click Activate new network configuration.
  3. Select Soft. The Network Activation Succeeded message is displayed after your new network configurations have been successfully activated.

The direct attached route is now displayed as pending on the CONTROL > Network page. To make the route active, you must use one of the IP addresses in the network as a shared network IP address.

Next Steps

Add at least one IP address from the network as a Shared IPv6 Address. If you are using a high availability setup, these IP addresses will be transferred to the secondary firewall in case of a failure.