Cannot add IPv6 address in ProxySG's ACL

Products

• ProxySG Software - SGOS

Issue/Introduction

 

ACL on IPv6 is not yet a supported feature on all SGOS versions.

What you will see when attempting to add an IPv6 ACL:

ProxySG is configured with an IPv6 address for management services.

When attempting to add an IPv6 ACL, the ProxySG returns an "Invalid input detected" error.


CLI example:

Configure an IPv6 ACL to permit only IPv6 address 2001:0db8:85a3:08d3:1319:8a2e:0370:7334 / 64 to manage the proxy:

login as: admin

[email protected]'s password:

10.105.13.250 - Blue Coat SG200 Series>en
Enable Password:

10.105.13.250 - Blue Coat SG200 Series#conf t
Enter configuration commands, one per line.  End with CTRL-Z.

10.105.13.250 - Blue Coat SG200 Series#(config)security allowed-access add 2001:0db8:85a3:08d3:1319:8a2e:0370:7334 64
                                                                           ^
% Invalid input detected at '^' marker.
% "2001:0db8:85a3:08d3:1319:8a2e:0370:7334" is not a valid IP address.


Management Console example:

Open up the management console and access Configuration > Authentication > Console Access > Console Access > New

In the "Add IP Address" box, key in "2001:0db8:85a3:08d3:1319:8a2e:0370:7334" in the IP address field and "64" in the Subnet mask field.

Click OK followed by Apply. You will see the same error:

% Invalid input detected at '^' marker.
% "2001:0db8:85a3:08d3:1319:8a2e:0370:7334" is not a valid IP address.

Resolution

This is currently an expected behaviour and there are no plans to support this in the near future yet.