It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

How to Configure IPv6 Header Settings

  • Last updated on

IPv6 data packets consist of a header and the payload. Because an IPv6 header is optimized for easy processing, its block size has a length of 40 bytes. This block only contains information that is essential for the IP routing. All other information must be put into an additional header that extends the standard IPv6 header - the IPv6 extension header. This header has a default length of 64 bit and can therefore be processed very quickly on 64-bit operating systems.

If selected in the configuration window, the respective IPv6 extension header is inserted between the header and the payload and contains an ID that fits into the existing system of protocol numbers. In the following table, the column with the header name Shows in Firewall History as holds the name of the extension header that is blocked by selecting the respective header type:

Extension HeaderMeaningShows in Firewall History as
Hop-by-Hop OptionsExamines packet by all devices on the pathHop by Hop
RoutingDirects a packet to one or more intermediate nodes before being sent to its destinationRouting
FragmentCarries information necessary to reassemble the original packetFragments
Authentication HeaderEnsures connectionless integrity using a hash and a secret shared keyAuth Hdr
Encapsulation Security PayloadCarries encrypted data for secure communicationESP
Destination OptionsThe header needs to be examined by the destination node onlyDestination
MobilityParameters for use with mobile IPv6Mobility
Host Identity ProtocolUsed for HIPv2Host Identity
Shim6 ProtocolDetects outages through the path and determines valid locator pairs when an outage is detectedShim6
Experimental and testing (type 253)ReservedReserved 253
Experimental and testing (type 254)ReservedReserved 254
Routing type 0Obsolete through RFC 5095Routing Type 0

Before You Begin

  • The Feature Level of the Forwarding Firewall must be set to 7.2 or higher.

Configure IPv6 Extension Headers

  1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > Firewall > Forwarding Rules.
  2. Double-click an IPv6 access rule.
  3. The Edit Rule window is displayed.
  4. From the Views menu on the left of the Edit Rule window, select IPv6 Extension Header.
  5. Select the check box for the line that applies.
    IPv6_extension_headers.png
  6. Click Send Changes.
  7. Click Activate.