Can I define an IPv6 address for Teacher?
Short answer
No. In the Teacher IP (and Conditional Learning IP) field, only IPv4 addresses and IPv4 blocks are processed; an IPv6 address is not rejected by the form, it is saved but is discarded without a warning when the WAF configuration is generated, so the requests that come from that source are not counted as Teacher requests. To teach from IPv6 clients, the identity is defined with Teacher Cookie or Teacher Header instead of IP, that is, with the value of the TR7-LEARN cookie or header; these two methods work independently of the address family. The Source IP Filter in the New analyze window of Analysis & Learning, on the other hand, accepts IPv6 addresses and blocks; it is a separate filter that selects the traffic to be included in the analysis.
Options
| Identity | For an IPv6 client |
|---|---|
| Teacher IP | Does not work; the IPv6 address is discarded |
Teacher Cookie (TR7-LEARN) | Works |
Teacher Header (TR7-LEARN) | Works |
| Conditional Learning IP | Does not work; the IPv6 address is discarded |
Conditional Learning Cookie and header (TR7-ANALYZE) | Works |
- If IPv4 and IPv6 addresses are written together in the IP field, the IPv4 addresses continue to work; only the IPv6 addresses are discarded.
- As long as the IP field is filled in, the card says "identified by IP"; it does not show that the IPv6 address was discarded.
- Other invalid entries: What happens if I enter an incorrect format (invalid IP) for the Teacher identity? · Use of the name and the value: What should the name of the Teacher Header or cookie be (TR7-LEARN); which name is used for Conditional Learning (TR7-ANALYZE)?
Common Misconceptions
- "A saved IPv6 address works." The form does not reject it, but it is not written to the configuration.
- "Source IP filter also accepts only IPv4." The analysis filter supports IPv6; the restriction is only in the Teacher IP and Conditional Learning IP fields.
How it is done in the documentation
