topic Re: How to add IP Protocol 41 (6to4 IPv6 Tunneling) to Cisco FTD? in Network Security

How to add IP Protocol 41 (6to4 IPv6 Tunneling) to Cisco FTD?

GWH-jayohaitchenn — Mon, 01 Jul 2019 09:15:30 GMT

Hi all,

I am implementing Eduroam at my site and there is a list of ports that need to be allowed open to anywhere. one of these is IP Protocol 41. I cannot seem to add this as an object on my Cisco FMC.

I am running FTD 6.2.3.4.

Does anyone know how to add this port object please?

Thanks

Re: How to add IP Protocol 41 (6to4 IPv6 Tunneling) to Cisco FTD?

dbgiles — Mon, 28 Oct 2019 15:00:03 GMT

I had this same issue. TAC assisted but here is the answer

Go into your ACL Policy for that FW

Then Click on Pre-Filter Policy - Edit

From here you can click Add Tunnel Rule

This will create a tunnel specific rule

Pretty similar to ACL policy editor except for Encapsulation & Ports tab

which has 4 check boxes --- GRE / IP-in-IP / IPv6-in-IP / Teredo Port (3544)

Mine looks like this

name: Permit-41 - rule type: tunnel - Source Intf: Outside - Dest Intf: Inside - Source Networks: site1,2,3 etc - dest networks: vpn1,2,3 - source port: any - dest port: IPV6(41) - vlan tag: any - Action: --> FastPath

Re: How to add IP Protocol 41 (6to4 IPv6 Tunneling) to Cisco FTD?

GWH-jayohaitchenn — Wed, 06 May 2020 06:57:35 GMT

Hi,

I was going back through my old emails and found this reply. Thank you so much, this is the correct answer and it helped me configure GRE access for an Aruba Controller too.