How to enable IPv6 on USG 100 FLEX

davigrmn

Hello, it's possible to enable IPv6 on USG 100 FLEX using nebula?

Already saw that nebula don't support IPv6 configuration and it says to enable it on Firewall Interface, but the option also don't appear on web interface.

Zyxel_Tina

Hi @davigrmn,

Currently, Nebula does not support IPv6 configuration for firewall interfaces. To enable and configure IPv6, you will need to manage the device in Standalone mode via the local Web GUI.

However, if your device is managed by Nebula, many local settings (including IPv6 options) will be hidden. That’s why the IPv6 option does not appear in the Web GUI.

To enable IPv6 in Standalone mode:

1. Remove the device from Nebula to switch it to Standalone mode.
   1. Navigate to Organization-wide > License & inventory > Devices, tick the device you want to remove, click the Actions button, and then click Remove from organization. (For detailed instructions, please refer to this FAQ.)
2. Access the device's local Web GUI.
3. Go to Configuration > System > IPv6, check the box for Enable IPv6, then click Apply.
4. After enabling IPv6 system-wide, go to Configuration > Network > Interface > Ethernet to configure IPv6 settings on individual interfaces. (For more information, see this FAQ.)

Additionally, USG FLEX firewalls also support Nebula Monitor Mode. This mode provides remote SSH, remote Web-GUI, and backup configuration file functions, allowing users to manage on-premise devices more easily. For further instructions, please refer to this FAQ.

Zyxel_Tina

Hi @davigrmn,

Currently, Nebula does not support IPv6 configuration for firewall interfaces. To enable and configure IPv6, you will need to manage the device in Standalone mode via the local Web GUI.

However, if your device is managed by Nebula, many local settings (including IPv6 options) will be hidden. That’s why the IPv6 option does not appear in the Web GUI.

To enable IPv6 in Standalone mode:

1. Remove the device from Nebula to switch it to Standalone mode.
   1. Navigate to Organization-wide > License & inventory > Devices, tick the device you want to remove, click the Actions button, and then click Remove from organization. (For detailed instructions, please refer to this FAQ.)
2. Access the device's local Web GUI.
3. Go to Configuration > System > IPv6, check the box for Enable IPv6, then click Apply.
4. After enabling IPv6 system-wide, go to Configuration > Network > Interface > Ethernet to configure IPv6 settings on individual interfaces. (For more information, see this FAQ.)

Additionally, USG FLEX firewalls also support Nebula Monitor Mode. This mode provides remote SSH, remote Web-GUI, and backup configuration file functions, allowing users to manage on-premise devices more easily. For further instructions, please refer to this FAQ.

davigrmn

Ok got it. So I will need to remove the firewall from nebula.

About it I have another question:

after removing and configuring manually from web interface, it will be able to put on nebula again? Because I have a memory that the firewall needed to be on default factory mode to put on nebula…

Zyxel_Tina

Hi @davigrmn,

Yes, that's correct — for USG FLEX series, switching between standalone mode and cloud management mode will reset the device to factory default settings, but it can still be registered to Nebula again in the future if needed.