IPv6 Firewall Rule for ICMPv6

It doesn't appear possible to configure a firewall rule to allow ICMPv6, or am I missing something? Following is a first attempt using icmpv6 and then when attempting icmp.

gcloud compute firewall-rules create test-ping-ipv6 \
--network <network name> \
--priority 1000 \
--direction ingress \
--action allow \
--source-ranges <IPv6 CIDR> \
--rules icmpv6

Creating firewall...failed.
ERROR: (gcloud.compute.firewall-rules.create) Could not fetch resource:
- Invalid value for field 'resource.allowed[0].IPProtocol': 'icmpv6'. Must be one of ["ah", "all", "esp", "icmp", "ipip", "sctp", "tcp", "udp"] or an IP protocol number between 0 and 255.

gcloud compute firewall-rules create test-ping-ipv6 \
--network <network name> \
--priority 1000 \
--direction ingress \
--action allow \
--source-ranges <IPv6 CIDR> \
--rules icmp

Creating firewall...failed.
ERROR: (gcloud.compute.firewall-rules.create) Could not fetch resource:
- Invalid value for field 'resource.allowed[0].IPProtocol': 'icmp'. IPv6 is not compatible with the ICMP protocol. Use the ICMPv6 protocol instead.

 

Solved Solved
0 1 875
1 ACCEPTED SOLUTION

Solved. Needed to use protocol 58 to get ipv6-icmp protocol.

View solution in original post

1 REPLY 1

Solved. Needed to use protocol 58 to get ipv6-icmp protocol.