4. UnderFirewall Policies, click Add. From Choose from ConfiguredPo licies, select the “ipv6-web-only” IPv6
session policy from the list.
5. Click Done to add the policy to the user role.
6. Click Apply to applyt his configuration.
To assign an IPv6 policy to a user role via the command-line interface,is suet hefollowing command in config mode:
user-role web-guest
access-list session ipv6-web-only position 1

Understand ing DHCPv6 P assthrough/Relay

The controllerforwards DHCPv6 requests fromI Pv6 clients to theexternal IPv6 router. On theexternal IPv6 router,
you must configurethe controller’s IP address as the DHCP relay. You do
not
needt o configure an IP helper address
on the controllert o forward DHCPv6 requests.
Managing IPv6 User Addresses

Viewing o r Deleting User E ntries

To view or delete IPv6 user entries via theWebUI:
1. Navigate to the Monitoring > Contro ller > Clients page.
2. Click the IPv6 tab to display IPv6 clients.
3. To delete an entryi nt heI Pv6 client display, click the radio button to the left of the client andthen click
Disconnect.
To view user entries for IPv6 clients using the command linei nterface,use the show user-table commandin
enablemode. To delete a user entry for an IPv6 client, access the CLI in config mode and use the aaa ipv6 user
deletecommand. For example:
aaa ipv6 user delete 2002:d81f:f9f0:1000:e409:9331:1d27:ef44

Understand ing User Roles

An IPv6 user or a client can inherit the co rrespondingIPv4 roles. A user or client entry on the user table will contain
the useror client��s IPv4 and IPv6 entries. After captive-portal authentication, a IPv4 client canacquire a different
role.This role is also updated on the client’s IPv6 entry in the user table.

Viewing D atapath Statistics fo r IPv6 Sessions

To view datapath session stat istics for individual IPv6 sess ions, access the command-line interface in enable mode
and issue the commandshow datapath session ipv6.To di splayt heuser entries in the datapath, access the
command-lineinterface in enable mode, and issue the command show datapath user ipv6.For details on each of
these commands and the output they display, refer to the

ArubaOSCommandLi neR eferenceGuide

.
Understanding IP v6 Exceptions and Best Prac tices
This releaseof ArubaOS doesnot supportthe following functions forIP v6 clients:
lThe controlleroffers limited routing services to IPv6 clients. It is highly recommendedto use an externalI Pv6
routerfor a complete routing experience(dynamic routing).
lThe controllerdoes not performnetwo rkaddress translation on I Pv6 addresses.
lVoice over IP is notsupported for IPv6 clients.
DellPowerConnect W- Series ArubaOS 6.2 | UserGuide IPv6Support | 146