IPv6
The console server is compliant with IPv4, IPv6 and dual stack protocols so that you can
enable IPv4 only, IPv6 only or both protocols, with support for dial-up connections and
primary network connections. You can configure the appliance to obtain its IPv6 network
parameters from a DHCPv6 server, by static configuration (IP address, prefix length and default
gateway) or stateless auto-configuration. You can add an appliance to the local network using
either its IPv6 address or a DNS name.
Services not supporting IPv6
The following services do not support IPv6:
• NIS authentication
• NFS data logging
• Virtual ports
VPN
The console server administrator can set up VPN connections to establish an encrypted
communication between the console server and a host on a remote network. The encryption
creates a security tunnel for dedicated communications.
You can use the VPN features on the console server to create a secure connection between the
console server and every machine on the subnet at the remote location or between the console
server and a single remote host.
To set up a security gateway, install IPSec on any machine performing networking over IP,
including routers, firewall machines, application servers and end-user machines.
The ESP and AH authentication protocols are supported. RSA Public Keys and Shared Secret
are supported.
For detailed information and procedures to configure a VPN connection, see VPN Connections
on page 75.
Packet Filtering
The administrator can configure the device to filter packets like a firewall. IP filtering is
controlled by chains and rules.
Structure of IP filtering
The Firewall Configuration form in the web manager is structured on two levels:
6 Cyclades
®
ACS5000 Installation/Administration/User Guide