How to add IP Protocol 41 (6to4 IPv6 Tunneling) to Cisco FTD?

[GWH-jayohaitchenn]

Hi all,

I am implementing Eduroam at my site and there is a list of ports that need to be allowed open to anywhere. one of these is IP Protocol 41. I cannot seem to add this as an object on my Cisco FMC.

I am running FTD 6.2.3.4.

Does anyone know how to add this port object please?

Thanks

[dbgiles · Accepted solution]

I had this same issue. TAC assisted but here is the answer

Go into your ACL Policy for that FW

Then Click on Pre-Filter Policy - Edit

From here you can click Add Tunnel Rule

This will create a tunnel specific rule

Pretty similar to ACL policy editor except for Encapsulation & Ports tab

    which has 4 check boxes --- GRE / IP-in-IP / IPv6-in-IP / Teredo Port  (3544)

Mine looks like this

name: Permit-41 - rule type: tunnel - Source Intf: Outside - Dest Intf: Inside - Source Networks: site1,2,3 etc - dest networks: vpn1,2,3 - source port: any - dest port: IPV6(41) - vlan tag: any - Action: --> FastPath

[GWH-jayohaitchenn]

Hi,

I was going back through my old emails and found this reply. Thank you so much, this is the correct answer and it helped me configure GRE access for an Aruba Controller too.