Specifications

IPv4 and IPv6 Internet and WAN Settings
68
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
a.b.c.d for part of the IPv6 address so that the IPv4-translated address becomes
0::ffff:0:a.b.c.d/96.
For SIIT to function, the routing mode needs to be IPv4 / IPv6. NETGEAR’s implementation of
SIIT lets you enter a single IPv4 address on the SIIT screen. This IPv4 address is then used
in the IPv4-translated address for IPv6 devices to enable communication between IPv4-only
devices on the VPN firewall’s LAN and IPv6-only devices on the WAN.
 To configure SIIT:
1. Select Network Configuration > SIIT. The SIIT
screen displays:
Figure 41.
2. Select the Enable SIIT check box.
3. In the SIIT Address fields, enter the IPv4 address that should be used i
n the IPv4-translated
address for IPv6 devices.
4. Click Apply to save your changes.
Configure Auto-Rollover for IPv6 Interfaces
You can configure the VPN firewall’s IPv6 interfaces for auto-rollover for increased system
reliability. You need to specify one WAN interface as the primary interface.
The VPN firewall supports the following modes for IPv6 interfaces:
• Primary WAN mode
. The selected WAN interface is made the primary interface. The
other three interfaces are disabled.
• Auto-rollover mode. The selected W
AN interface is defined as the primary link, and
another interface needs to be defined as the rollover link. The remaining two interfaces
are disabled. As long as the primary link is up, all traffic is sent over the primary link.
When the primary link goes down, the rollover link is brought up to send the traffic. When
the primary link comes back up, traffic automatically rolls back to the original primary link.
If you want to use a redundant ISP link for backup purposes, select the WAN port that
should function as the primary link for this mode. Ensure that the backup W
AN port has
also been configured and that you configure the W
AN failure detection method on the
WAN Advanced Options screen to support auto-rollover.