IPv6 Support
IPv6 is the successor to IPv4. IPv6 builds upon the functionality of IPv4, providing improvements to addressing, configuration and maintenance, and security. These improvements include:
- Expanded addressing capabilities—IPv6 provides a larger address space. IPv6 addresses consist of 128 bits, while IPv4 addresses consist of 32 bits.
- Header format simplification—The IPv6 packet header format is designed to be efficient. IPv6 standardizes the size of the packet header to 40 bytes, divided into 8 fields.
- Improved support for extensions and options—Extension headers carry Internet-layer information and have a standard size and structure.
- Improved privacy and security—IPv6 supports extensions for authentication and data integrity, which enhance privacy and security.
Table 24 lists the SRX Series and J Series features that support IPv6. For more information about these features, see the Junos OS Security Configuration Guide.
Table 24: IPv6 Support
| Feature | SRX100 SRX210 SRX240 | SRX650 | SRX3400 SRX3600 SRX5600 SRX5800 | J Series |
|---|---|---|---|---|
| IPv6 address configuration | ||||
Interfaces | Yes | Yes | Yes | Yes |
Address books | Yes | Yes | Yes | Yes |
Security policy rule matching | Yes | Yes | Yes | Yes |
| IPv6 address reporting | ||||
CLI show commands | Yes | Yes | Yes | Yes |
Logging | Yes | Yes | Yes | Yes |
SNMP MIB | Yes | Yes | Yes | Yes |
| Packet-based forwarding and security features | ||||
Forwarding option: packet mode | Yes | Yes | No | Yes |
Firewall filters | Yes | Yes | Yes | Yes |
Class of service | Yes | Yes | Yes | Yes |
| Flow-based forwarding and security features | ||||
Forwarding option: flow mode | Yes | Yes | Yes | Yes |
Screens | Yes | Yes | Yes | Yes |
Security policy (firewall) | Yes | Yes | Yes | Yes |
Security policy (IDP) | No | No | No | No |
Security policy (UTM) | No | No | No | No |
Zones | Yes | Yes | Yes | Yes |
| Chassis cluster | ||||
Active-active | No | No | No | No |
Active-passive | Yes | Yes | Yes | Yes |
| System services DHCPv6, DNS, HTTP, ping, SNMP, SSH, syslog, telnet, traceroute | Yes | Yes | Yes | Yes |
| IPv6–related protocols BFD, BGP, ECMPv6, ICMPv6, neighbor discovery (ND), OSPFv3, RIPng | Yes | Yes | Yes | Yes |