Configuring an ISATAP Tunnel

ISATAP (Intra-Site Automatic Tunnel Addressing Protocol) can be used to provide IPv6 connectivity through an IPv4-only infrastructure. ISATAP is a simple tunneling mechanism that connects dual-stack (IPv6/IPv4) node to other dual-stack nodes or IPv6 nodes over IPv4 networks. The IPv4 network is viewed by ISATAP as a link layer for IPv6.

ISATAP can be used in several scenarios to provide unicast connectivity between ISATAP hosts, and ISATAP host and hosts on IPv6 networks.

To configure an ISATAP tunnel

1. Navigate to Network > System > Interfaces > Interfaces Settings.

2. On the Interfaces Settings page, click IPv6.

3. Click Add Interface and select Tunnel Interface. The Add Tunnel Interface dialog box is displayed.

4. In the Zone field, Select the zone for the tunnel interface.

5. In the Tunnel Type drop-down list, select ISATAP Tunnel Interface.

6. Enter a Name for the tunnel interface.

7. Bound to IPv4 Address of - Select an interface from the drop-down menu. The ISATAP tunnel uses the IPv4 address of the bound interface as the IPv4 end address of 6over4 tunnel.

8. IPv6 Subnet Prefix - Select an address object from the drop-down menu (or select Create a new address object). The IPv6 subnet prefix is a 64 bit prefix, and is used by ISATAP hosts for ISATAP address auto configuration.

9. Tunnel Interface Link MTU - The recommended MTU for the interface link. A value of 0 means firewall does not advertise link MTU for the link.

10. Enter any optional comment text in the Comment field. This text is displayed in the Comment column of the Interface table.

11. If you want to enable remote management of the firewall from this interface, select the supported management protocol(s): HTTPS, Ping, or SNMP.

12. If you want to allow selected users with limited management rights to log in to the Security Appliance, select HTTP and/or HTTPS in User Login.

13. Click OK.