Firewall IPv6 address templates
You can use the IPv6 address templates to create new IPv6 addresses that share a prefix. Using templates for addresses reduces the chance of configuring an incorrect address due to a typographical error.
- A standard IPv6 address can be divided into three parts:
[IPv6 network prefix] + [subnet segments] + [host address]
- The subnet segments can be split into multiple 4-bit blocks called nibbles
- Each subnet segments represent different geographical or organizational parts of the network. They are represented by 1 or more nibbles.
Example of a prefix:
2001:db8:1234:0000::/64
| Section | Description |
|---|---|
| The yellow highlighted characters | Prefix (48 bits) |
| The green highlighted characters (zeros) | Place holder for the subnet segments (16 bits) |
| The red highlighted characters | Subnet mask |
The 16 bits that make up the subnet segments can be more granular.
Example: 0011 1111 0000 1101
| Segment | Binary | Hexadecimal |
|---|---|---|
| Site | 0011
|
0x3
|
| Subsite | 1111
|
0xf
|
| Subnet | 0000 1101
|
0x0d
|
The resulting network portion of the address is:
2001:db8:1234:3f0d::/64
By changing the mask, the subnet segment could be increased.
2001:db8:1234:0000 0000::/48
2001:db8:1234:0000 0000 0000::/32
This makes more options available for the configuration of the subnet segments. Below is an example of a very basic template:
Using that template, you can see how the GUI could be used to quickly create address objects.
|
You can use the template to enter the subnet prefix alone. You don't have to use the segment portion of the template. |