PCNSE · Question #805
A company wants to deploy IPv6 on its network which requires that all company Palo Alto Networks firewalls process IPv6 traffic and to be configured with IPv6 addresses. Which consideration should the
The correct answer is D. Device > Setup Settings Enable on each interface. To deploy IPv6, engineers must first enable global IPv6 support in Device > Setup Settings and then configure IPv6 on specific network interfaces.
Question
A company wants to deploy IPv6 on its network which requires that all company Palo Alto Networks firewalls process IPv6 traffic and to be configured with IPv6 addresses. Which consideration should the engineers take into account when planning to enable IPv6?
Options
- ADevice > Setup Settings Do not enable on each interface
- BNetwork > Zone Settings Do not enable on each interface
- CNetwork > Zone Settings Enable on each interface
- DDevice > Setup Settings Enable on each interface
How the community answered
(36 responses)- B3% (1)
- C6% (2)
- D92% (33)
Why each option
To deploy IPv6, engineers must first enable global IPv6 support in Device > Setup Settings and then configure IPv6 on specific network interfaces.
While "Device > Setup Settings" is the correct location for the global IPv6 enable, choosing "Do not enable on each interface" would prevent IPv6 traffic flow and address assignment on those interfaces.
"Network > Zone Settings" is an incorrect location for enabling global IPv6 functionality or configuring IPv6 addresses directly, as zones define security boundaries rather than interface addressing or global protocol support.
"Network > Zone Settings" is an incorrect location for enabling global IPv6 functionality or configuring IPv6 addresses directly, as zones define security boundaries rather than interface addressing or global protocol support.
The process of enabling IPv6 on a Palo Alto Networks firewall requires enabling the global IPv6 setting under Device > Setup > Management > General Settings to allow the firewall to support IPv6 traffic. Subsequently, IPv6 must be configured and enabled on specific network interfaces under Network > Interfaces where IPv6 addresses are assigned.
Concept tested: Palo Alto Networks IPv6 global and interface configuration
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/networking/ipv6/configure-ipv6.html
Topics
Community Discussion
No community discussion yet for this question.