Disabling IPv6 support for a particular interface on the Layer 7 Gateway appliance

Products

• CA API Gateway

Issue/Introduction

IPv6 is a technology intended to resolve an IP address shortage for publicly consumable servers and hosts. It is very critical for any system that is expected to communicate with public systems outside of a controlled local area network. The Gateway is typically intended to be run within a local or enterprise network and as such does not usually require the additional address space granted by IPv6. IPv6 support was included in earlier versions of the Gateway as requested.

Environment

This applies to all Gateway versions, all steps are actually completed at the operating system level.

Resolution

This process will need to be completed on each node in the cluster.

1. Log in to the Gateway appliance as the ssgconfig user
2. Select Option #3: Use a privileged shell (root)
3. Open or create the following file: /etc/modprobe.d/disable-ipv6.conf
4. Append the following line: install ipv6 /bin/true
5. Save the file and exit the editor
6. Open the following file: vi /etc/sysconfig/network
7. Ensure NETWORKING_IPV6 is set to NO
8. Save the file and exit
9. Reconfigure the system controls: echo net.ipv6.conf.all.disable_ipv6 = 1 >> /etc/sysctl.conf
10. Restart the Gateway appliance