topic Re: FMC 7.4 S2S VPN for simultaneous IPv4/IPv6 traffic in Network Security

FMC 7.4 S2S VPN for simultaneous IPv4/IPv6 traffic

shadow69 — Thu, 12 Dec 2024 14:16:02 GMT

Is it possible to set up a S2S VPN in a way that will pass both IPv4 and IPv6 traffic from the spoke site to the hub site?

I see in the manual (https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/740/management-center-device-config-74/vpn-s2s.html#task_cg5_k1s_cmb) where 6 over 6, 4 over 6, 4 over 4, and 6 over 4 are supported, but it doesn't mention anything about IPv4 and IPv6 at the same time. Nor have I found a way to set it up that works.

MHM Cisco World — Sat, 14 Dec 2024 15:43:08 GMT

IPv6 Support
VTI supports IPv6.

You can use an IPv6 address for the tunnel source interface and use the same address as the tunnel endpoint.

The management center supports the following combinations of VTI IP (or internal networks IP version) over public IP versions:

IPv6 over IPv6

IPv4 over IPv6

IPv4 over IPv4

IPv6 over IPv4

BOTH you can not but you can use IPv4/6 over IPv4/6

MHM