Supported/Unsupported IPv6 features SonicOS 7.0.x/6.5.x/5.9.x firmware

IPv6 Features

Category

Item

G5(5.9.x)

G6(6.5.0/.1)

Gen7

IPv6 Core

IPv6 Connection Cache

√

√

√

IPv6 Header validation

√

√

√

IPv6 Fragmentation Handling

√

√

√

IPv6 Reassemble Handling

√

√

√

IP Spoof

√

√

√

Mobile IPv6 (RFC 3775)

x

x

x

DHCP Prefix Delegation (RFC3633)

√

√

 √

IPv6 Security

DHCPv6 Authentication (RFC 3118)

x

x

 x

SEcure ND (RFC3971)

x

x

 x

RA Authentication (RFC 4191)

x

x

 x

IPv6 Router Advertisement Guard (RFC 6105)

x

x

 x

IPv6 Stateful Protocol

ICMPv6

1)  Destination Unreachable (IPv6)

2)  Packet Too Big

3)  Time Exceeded (IPv6)

4)  Parameter Problem

5)  Echo (IPv6)

6)  Echo Reply (IPv6)

√

√

 



√

FTPv6

1) EPRT

1) EPSV

√

√

 
√

Oracle SQL/Net

x

x

x 

SIP

x

√

 √

H323

1)  RAS Multicast Forwarding

2)  RTSP

x

x

 
x

Visualization

Real-Time Monitor

√

√

 √

App Flow Monitor

√

√

 √

App Flow Report

x

√

 √

Threat Report

√

√

 √

User Monitor

√

√

 √

Connection Monitor

Connection Monitor

√

√

 √

IPv6 Address Filtering

√

√

 √

License

IPv6 Support for SonicWALL Backend Servers

√

√

 √

GMS

GMS

x

x

 x

SNMP

SNMP

√

√

 √

SNMPv3

√

√

 √

IPv6 MIB information

(RFC 4293 IP-MIB(IPv6 Only) and RFC 4292 IP-

FORWARD-MIB(IPv6 Only))

x

√

 
√

NTP

NTP

x

√

√ 

Packet Monitor

Packet Monitor

√

√

√ 

Diagnostics

Check network Settings

x

x

 x

Packet size Monitor

x

x

 x

DNS Lookup

√

√

 √

Find Network Path

√

√

 √

Ping

√

√

 √

Real-Time Black List Lookup

x

x

 x

Reversed DNS Lookup

√

√

 √

Connection Limit TopX

x

x

 x

Check GEO Location and BOTNET Server Lookup

x

x

 x

MX Lookup and Banner Check

x

x

 x

Traceroute

√

√

√ 

PMTU Discovery

√

√

 √

Web Server Monitor

x

x

 x

User Monitor

x

x

 x

Interface

IPv6 Interface

√

√

√ 

IPv6 Management Interface

N/A

√

 √

SSH Management

x

√

 √

DHCP Client Mode

√

√

 √

PPPoE Client Mode

√

√

 
√

L2TP Client Mode

x

x

 x

L2B Mode

√

√

 √

TP Mode

x

x

 x

Wired Mode

√

√

 
√

IPv6 Chassis Interface

N/A

N/A

 N/A

Tunnel Interface (6to4)

IPv6 Manual Tunnel

√

√

 √

GRE Tunnel

√

√

 √

6to4 Auto Tunnel

√

√

 √

6rd

√

√

 √

Tunnel Interface (4to6)

ISATAP

x

√

 √

Dual-Stack Lite

x

√

 √

GRE Tunnel

x

√

 √

VLAN

IPv6 VLAN Interface

√

√

 √

IPv6 VLAN in L2B Mode

√

√

 √

DHCP Client Mode

√

√

 √

PPPoE Client Mode

x

x

 x

L2TP Client Mode

x

x

 x

WAN Load Balance

WAN Load Balance

x

√

 √

DNS

DNS

√

√

 √

DNS Rebinding Attack Prevention

x

x

 x

DNS Cache

x

x

 x

IPv6 Services — AAAA DNS Lookups over an IPv4 Transport

√

√

 √

DNS Proxy

x

√

√ 

DNS Sec

x

x

 x

Address Objects

Address Objects

√

√

√ 

FQDN

x

√

 √

MAC Objects

x

√

√ 

Routing

Routing

√

√

 √

ECMP

x

√

 √

Advanced Routing

RIPng

√

√

 √

OSPFv3

√

√

 √

OSPFv3 IPSec ESP Encryption and

Authentication

x

x

x 

BGP-6

√

√

 √

NAT

IPv6 <-> IPv6 NAT

√

√

√ 

IPv4 <-> IPv6 NAT (NAT-PT)

x

x

 x

Round Robin

√

√

√ 

Probing

x

x

x 

NAT64

x

√

 √

NDP

NDP

√

√

 √

MAC-IP Antispoof

MAC-IP Antispoof

x

√

√ 

DHCP Server

DHCP Server

√

√

√ 

Static Lease Scope

√

√

 √

Dynamic Lease Scope

√

√

 √

Integrated Options (DNS/WINS Server)

√

√

√ 

Generic Options

√

√

 √

Lease Persistence

x

x

 x

IP Helper

IP Helper

x

√

 √

Web Proxy

Web Proxy

x

x

 x

DDNS

DDNS

x

√

 √

Network Monitor

Network Monitor

x

√

 √

WWAN

Unknown

Unknown

Unknown 

Wireless

SonicPoint

√

√

 √

Wireless AP

√

√

√ 

Firewall

Access Rules

√

√

√

GeoIP Filter

x

√

√

Botnet Filter

x

x

x

Connection Limit

√

√

√

QoS Tagging

√

√

√

App Firewall

App Rules

√

√

√

Match Objects

N/A

N/A

N/A

Action Objects

N/A

N/A

N/A

Detection Prevention

Stealth Mode

Unknown

Unknown

Unknown

Randomize IP ID

x

x

x

Dynamic Ports

FTP Transformations for TCP port(s)

x

√

√

Enable support for Oracle (SQLNet)

x

x

x

Enable RTSP Transformations

x

x

x

Source Routed Packets

Drop source routed IP packets

Unknown

Unknown

Unknown

Access Rule Options

Force inbound and outbound FTP data connections to use the default port: 20

Unknown

Unknown

Unknown

Apply firewall rules for intra-LAN traffic to/from the same interface

Unknown

Unknown

Unknown

Always issue RST for discarded outgoing TCP connections

Unknown

Unknown

Unknown

IP and UDP Checksum Enforcement

Enable IP header checksum enforcement

N/A

N/A

N/A

Enable UDP checksum enforcement

Unknown

Unknown

Unknown

Advanced BWM

Advanced BWM

√

√

√

BWM Monitor

√

√

√

Bandwidth Objects

N/A

N/A

N/A

Flood Protection

TCP Sync Proxy (Layer 3 SYN Flood Protection - SYN Proxy)

√

√

√

Layer 2 SYN/RST/FIN Flood Protection - MAC Blacklisting

x

x

x

Default UDP Connection Timeout

Unknown

Unknown

Unknown

UDP Flood Protection

x

√

√

ICMP Flood Protection

x

√

√

Traffic Statistics

√

√

√

Multicast

Multicast Proxy

x

x

x

Multicast Routing

x

x

x

SSL Control

SSL Control

x

√

√

DPI-SSL

DPI-SSL

x

√

√

DPI-SSH

DPI-SSH

x

√

√

VoIP

VoIP

x

√

√

Anti-Spam

Anti-Spam

x

x

x

IPSec VPN

GroupVPN

x

x

x

IKE

x

x

x

IKEv2

√

√

√

6to4 VPN

x

x

x

Route based VPN

x

x

x

Mobile IKEv2

x

x

x

EAP

x

x

x

IKE DPD

x

x

x

OCSP

x

x

x

DHCP Over VPN

x

x

x

L2TP Server

x

x

x

SHA2 (256, 384, 512)

√

√

√

SSL VPN

SSLVPN

√

√

√

Virtual Assist

x

x

x

ULA

IPv6 User Login and Management

√

√

√

User Status

√

√

√

Login Uniqueness

√

√

√

SSO

x

x

x

Radius

x

x

x

LDAP

x

x

x

Guest Service

x

(√)

(√)

HA

HA

√

√

√

Monitoring IP

√

√

√

A-A UTM

x

x

x

Clustering

x

x

x

HA Stateful Failover for IPv6 Protocols

Connection Cache

√

√

√

NDP

√

√

√

DHCP Server

√

√

√

VPN

√

√

√

SonicPoint

√

√

√

ULA v6

√

√

√

FTP

√

√

√

Multicast

x

x

x

Oracle SQL/Net

x

x

x

RTSP

x

x

x

VoIP

x

x

x

Content Filtering

SonicWALL CFS Service

√

√

√

Websense Enterprice

x

x

x

ActiveX, Java, Cookies restriction

√

√

√

CFS Exclusion List

√

√

√

CFS Policy per IP Address Range

x

x

x

CFS Custom List

√

√

√

1) Allowed Domains

2) Forbidden Domains

3) Keyworks blocking

 
√

 
√

 
√

4) IP based HTTPS Content Filtering

5) Safe Search Enforcement

Keywords blocking

√

√

√

Client AV Enforcement

Exclusion List

√

√

√

Gateway AV

Gateway AV

√

√

√

Gateway AV Exclusion List

√

√

√

IDP

IDP

√

√

√

IDP Exclusion List

√

√

√

Anti-Spyware

Anti-Spyware

√

√

√

Anti-Spyware Exclusion List

√

√

√

RBL

RBL

x

x

x

GeoIP

GeoIP Filter

x

√

√

Botnet

Botnet Filter

x

x

x

WXA

WXA

x

x

x

App Flow Server

IPv6 App Flow generating to SonicWALL App Flow Server

√

√

√

IPv6 App Flow generating to 3rd party App Flow Server

√

√

√

Connect App Flow Server with IPv6 address

x

x

x

Log

Enhanced Log

√

√

√

IPv6 Address Log entry

√

√

√

Logs from IPNET Stack

x

√

√

Log DNS Name Resolution

x

x

x

IPv4 syslog messages to include IPv6 address

√

√

√

IPv6 syslog messages to include IPv6 address

x

x

x

IPv6 Mail Server

x

x

x

ECLI

ECLI Configuration for IPv6

√

√

√

Supported RFC

RFC

Name

1886

DNS Extensions to support IP version 6 [IPAPPL dns client]

1886

DNS Extensions to support IP version 6

1981

Path MTU Discovery for IPv6

2080

RIPng for IPv6

2113

IP Router Alert Option

2373

IPv6 Addressing Architecture

2374

An IPv6 Aggregatable Global Unicast Address Format (obsoleted by 3587)

2375

IPv6 Multicast Address Assignments

2460

IPv6 specification

2461

Neighbour discovery for IPv6 (Obsoleted by RFC 4861)

2462

IPv6 Stateless Address Autoconfiguration

2463

ICMPv6 for IPv6 specification

2464

Transmission of IPv6 Packets over Ethernet Networks

2473

Generic Packet Tunneling in IPv6 Specification

2474

Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers

2545

Use of BGP-4 Multiprotocol Extensions for IPv6 Inter-Domain Routing

2553

Basic Socket Interface Extensions for IPv6

2663

IP Network Address Translator (NAT) Terminology and Considerations.

2710

Multicast Listener Discovery (MLD) for IPv6

2711

IPv6 Router Alert Option

2784

Generic Routing Encapsulation

2893

Transition Mechanisms for IPv6 Hosts and Routers

2991

Multipath Issues in Unicast and Multicast Next-Hop Selection

3022

Traditional IP Network Address Translator (Traditional NAT).

3056

Connection of IPv6 Domains via IPv4 Clouds

3315

Dynamic Host Configuration Protocol for IPv6 (DHCPv6)

3484

Default Address Selection for Internet Protocol version 6 (IPv6) (no policy hooks)

3493

Basic Socket Interface Extensions for IPv6

3513

Internet Protocol Version 6 (IPv6) Addressing Architecture

3542

Advanced Sockets Application Program Interface (API) for IPv6

3587

IPv6 Global Unicast Address Format (obsoletes 2374)

3633

IPv6 Prefix Options for Dynamic Host Configuration Protocol (DHCP) version 6

3646

DNS Configuration options for Dynamic Host Configuration Protocol for IPv6(DHCPv6)

3736

Stateless Dynamic Host Configuration Protocol(DHCP) Service for IPv6

4443

Internet Control Message Protocol (ICMPv6) for the

Internet Protocol Version 6 (IPv6) Specification (obsoletes 2463)

4552

Authentication/Confidentiality for OSPFv3

4760

Multiprotocol Extensions for BGP-4

4861

Neighbor Discovery for IP version 6 (IPv6) (obsoletes 2461)

4862

IPv6 Stateless Address Autoconfiguration (obsoletes 2462)

5214

ISATAP

5340

OSPF for IPv6 (obsoletes 2740)

5969

IPv6 Rapid Deployment on IPv4 Infrastructures

6146

Stateful NAT64: Network Address and Protocol Translation from IPv6 Clients to IPv4

Servers

6333

Dual-Stack Lite Broadband Deployments Following IPv4 Exhaustion

6334

Dynamic Host Configuration Protocol for IPv6 (DHCPv6) Option for Dual-Stack Lite

Un-supported RFC

RFC 2002

IP Mobility Support

RFC

2766

Network Address Translation - Protocol Translation (NAT-PT)

RFC

2472

IP Version 6 over PPP

RFC

2452

IP Version 6 Management Information Base for the Transmission Control Protocol.

RFC

2454

IP Version 6 Management Information Base for the User Datagram Protocol.

RFC

2465

Management Information Base for IP Version 6: Textual Conventions and General Group.

RFC

2466

Management Information Base for IP Version 6: ICMPv6 Group.

RFC

3775

Mobility Support in IPv6

RFC

3971

SEcure Neighbor Discovery (SEND)

RFC

3972

Cryptographically Generated Addresses (CGA)

RFC

4163

Robust Header Compression (ROHC): Requirements on TCP/IP Header Compression

RFC

5881

Bidirectional Forwarding Detection (BFD) for IPv4 and IPv6 (Single Hop)

Supported Protocols

Protocol Number (Decimal)

Protocol Keyword

Protocol Name

References

1

ICMP

Internet Control Message

Protocol

RFC 792

2

IGMP

Internet Group

Management Protocol

RFC 1112

6

TCP

Transmission Control

Protocol

RFC 793

17

UDP

User Datagram Protocol

RFC 768

41

6over4

6over4

RFC 2473, RFC

3056

47

GRE

Generic Routing

Encapsulation

RFC 2784, RFC

2890

50

ESP

Encapsulating Security

Payload

RFC 4303

51

AH

Authentication Header

RFC 4302

58

ICMPv6

ICMP for IPv6

RFC 4443, RFC

4884

59

IPv6-NoNxt

No Next Header for IPv6

RFC 2460

88

EIGRP

EIGRP

89

OSPF

Open Shortest Path First

RFC 1583

103

PIM

Protocol Independent

Multicast

108

IPCOM

IP Payload Compression

Protocol

RFC 3173

ANY

Defined and added as an

service AO by customer

ANY

Received by L2B

interface