Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.

  • 1.  IPv6 policies and source address range

    Posted 09-04-2009 07:07

    I have 3 interfaces in a zone.  All three have their own IPv4 subnet and IPv6 prefix.

     

    I have been setting up policies for IPv4, specifying the subnet I wanted to use with the policy.

     

    Now I am doing IPv6 policies (wow, double your pain!).

     

    Anyway there is a 'Any-IPv6' 'Address Book Entry'.  But I cannot create an IPv6 subnet entry on this screen.

     

    Has anyone dealt with this?  I do want some different policies by interface...

     

     



  • 2.  RE: IPv6 policies and source address range
    Best Answer

    Posted 09-05-2009 19:14

    I figured out I was being lazy with IPv4 subnets, and creating the address range right in the policy dialog.

     

    There is a specific screen for address ranges:  Policy > Policy Elements > Addresses > List

     

    And there you CAN create ranges for IPv6 prefixes, and then use them in the policy dialog screen.

     

    This is a minor 'glich' in IPv6 support on the WebGUI.