Overview

Kerio Control supports IPv6 in traffic rules configuration. There are several places to check in order to make sure IPv6 configuration is enabled.

When you configure the Traffic rules section, you can include IPv6 into traffic rules by modifying Traffic Rules translation.

During the upgrade to Kerio Control 8.4.0, your IPv6 prefixes allowed on the Security Settings > IPv6 tab are transformed to Traffic Rules.

Solution

• You can decide if the rule is valid for IPv4, IPv6, or both types of IP protocol by navigating to Configuration -> Traffic Rules and changing the IP version column to the value that adjusts to your needs.
  
  
• You can set an IPv6 address, a range, or a prefix in the Source and Destination columns for each traffic rule.
  
• You can set an IPv6 address, a range, or a prefix for an IP address group in the Source and Destination columns for each traffic rule.
  
• In Translation, you can apply the settings to IPv6 prefix translation.
  

NOTE: Do not forget that IPv4 NAT is also applied. When you want to set source or destination NAT, you must type also IPv4 address.

• To enable source NAT in an IPv6 rule, select Use specific IP address, and type IPv6 prefix.
  
• When you enable source NAT and use Default settings or Use specific outgoing interface, you must type IPv6 prefix to the interface in use:

1. Go to Interfaces.
2. Double-click the interface to which the communication should be translated.
3. In the dialog for interface configuration, select the IPv6 tab.
4. Click Enable and configure it.
   
5. Save the settings.

• To enable destination NAT in an IPv6 rule, select 'Translate with the following IPv6 prefix or host', and type IPv6 prefix.
  

Confirmation

Once the 'Enable Destination NAT', 'Enable Source NAT' and the IPv6 Prefix translation settings are applied, the traffic rules are now configured for IPv6 connectivity.