Forum Discussion

David_G__33241's avatar
David_G__33241
Icon for Nimbostratus rankNimbostratus
Feb 12, 2014

Network tunnel allowing IPv6 to bypass tunnel

I have created a Network Access Tunnel with the following parameters:   Supported IP Version: IPv4 Traffic Options: Force all traffic through tunnel Allow local subnet: No Client side security...
BIG-IP Access Policy Manager (APM)
design
security
Alexey_384's avatar
Alexey_384
Historic F5 Account
Feb 12, 2014

Configure NA with IPv4+IPv6, and deny IPv6 access using ACL (or don't configure IPv6 GW or self-ip on BIG-IP).

 

David_G__33241's avatar
David_G__33241
Icon for Nimbostratus rankNimbostratus
Feb 13, 2014
I created an IPv6 lease pool and assigned it to the NA and presto - no more split tunnel. No need to assign an IPv6 address to the interface. Thanks for the quick response.