Firewall IPv6 address templates

You can use the IPv6 address templates to create new IPv6 addresses that share a prefix. Using templates for addresses reduces the chance of configuring an incorrect address due to a typographical error.

• A standard IPv6 address can be divided into three parts:

[IPv6 network prefix] + [subnet segments] + [host address]

• The subnet segments can be split into multiple 4-bit blocks called nibbles
• Each subnet segments represent different geographical or organizational parts of the network. They are represented by 1 or more nibbles.

Example of a prefix:

2001:db8:1234:0000::/64

Section	Description
The yellow highlighted characters	Prefix (48 bits)
The green highlighted characters (zeros)	Place holder for the subnet segments (16 bits)
The red highlighted characters	Subnet mask

The 16 bits that make up the subnet segments can be more granular.

Example: 0011 1111 0000 1101

Segment	Binary	Hexadecimal
Site	0011	0x3
Subsite	1111	0xf
Subnet	0000 1101	0x0d

The resulting network portion of the address is:

2001:db8:1234:3f0d::/64

By changing the mask, the subnet segment could be increased.

2001:db8:1234:0000 0000::/48

2001:db8:1234:0000 0000 0000::/32

This makes more options available for the configuration of the subnet segments. Below is an example of a very basic template:

Using that template, you can see how the GUI could be used to quickly create address objects.

You can use the template to enter the subnet prefix alone. You don't have to use the segment portion of the template.