{"id":24568,"date":"2025-07-04T14:12:17","date_gmt":"2025-07-04T07:12:17","guid":{"rendered":"https:\/\/vacif.com\/?p=24262"},"modified":"2025-08-08T15:37:59","modified_gmt":"2025-08-08T08:37:59","slug":"huong-dan-cau-hinh-ipv6-tren-firewall-sophos","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/huong-dan-cau-hinh-ipv6-tren-firewall-sophos\/","title":{"rendered":"H\u01b0\u1edbng D\u1eabn C\u1ea5u H\u00ecnh IPv6 Tr\u00ean Firewall Sophos"},"content":{"rendered":"\n

I – T\u1ed5ng quan<\/span><\/h2><\/div><\/div><\/div>\n\n\n\n

IPv6 l\u00e0 th\u1ebf h\u1ec7 \u0111\u1ecba ch\u1ec9 IP m\u1edbi thay th\u1ebf cho IPv4 v\u1edbi kh\u00f4ng gian \u0111\u1ecba ch\u1ec9 g\u1ea7n nh\u01b0 v\u00f4 h\u1ea1n. Trong m\u1ea1ng n\u1ed9i b\u1ed9, vi\u1ec7c tri\u1ec3n khai IPv6 gi\u00fap th\u1eed nghi\u1ec7m c\u00e1c k\u1ef9 thu\u1eadt m\u1edbi nh\u01b0 DHCPv6, SLAAC, router advertisement, v\u00e0 chu\u1ea9n b\u1ecb cho kh\u1ea3 n\u0103ng m\u1edf r\u1ed9ng trong t\u01b0\u01a1ng lai.<\/p>\n\n\n\n

Sophos Firewall h\u1ed7 tr\u1ee3 c\u1ea5u h\u00ecnh IPv6 n\u1ed9i b\u1ed9 m\u00e0 kh\u00f4ng c\u1ea7n nh\u00e0 m\u1ea1ng c\u1ea5p prefix. \u0110i\u1ec1u n\u00e0y gi\u00fap d\u1ec5 d\u00e0ng m\u00f4 ph\u1ecfng v\u00e0 ki\u1ec3m tra ho\u1ea1t \u0111\u1ed9ng c\u1ea5p ph\u00e1t \u0111\u1ecba ch\u1ec9 IPv6 trong lab ho\u1eb7c doanh nghi\u1ec7p nh\u1ecf.<\/p>\n\n\n\n

II – M\u1ee5c ti\u00eau<\/span><\/h2><\/div><\/div><\/div>\n\n\n\n

B\u00e0i vi\u1ebft n\u00e0y nh\u1eb1m h\u01b0\u1edbng d\u1eabn c\u00e1ch c\u1ea5u h\u00ecnh IPv6 tr\u00ean Sophos Firewall trong m\u00f4i tr\u01b0\u1eddng n\u1ed9i b\u1ed9 (lab) khi ch\u01b0a c\u00f3 IPv6 t\u1eeb nh\u00e0 m\u1ea1ng. M\u1ee5c ti\u00eau ch\u00ednh bao g\u1ed3m:<\/p>\n\n\n\n

    \n
  • L\u00e0m quen v\u1edbi c\u01a1 ch\u1ebf ho\u1ea1t \u0111\u1ed9ng c\u1ee7a IPv6 tr\u00ean Sophos Firewall.<\/li>\n\n\n\n
  • Tri\u1ec3n khai c\u1ea5p ph\u00e1t \u0111\u1ecba ch\u1ec9 IPv6 t\u1ef1 \u0111\u1ed9ng trong m\u1ea1ng LAN.<\/li>\n\n\n\n
  • Th\u1ef1c h\u00e0nh v\u00e0 ki\u1ec3m tra c\u00e1c ph\u01b0\u01a1ng ph\u00e1p c\u1ea5p ph\u00e1t \u0111\u1ecba ch\u1ec9 nh\u01b0 DHCPv6 Stateful, SLAAC, v\u00e0 Stateless DHCPv6.<\/li>\n\n\n\n
  • T\u1ea1o n\u1ec1n t\u1ea3ng \u0111\u1ec3 tri\u1ec3n khai th\u1ef1c t\u1ebf trong doanh nghi\u1ec7p khi c\u00f3 IPv6 t\u1eeb ISP.<\/li>\n<\/ul>\n\n\n\n

    III – T\u00ecnh hu\u1ed1ng c\u1ea5u h\u00ecnh<\/span><\/h2><\/div><\/div><\/div>\n\n\n\n

    Trong m\u00f4i tr\u01b0\u1eddng lab n\u1ed9i b\u1ed9, b\u1ea1n ch\u01b0a c\u00f3 k\u1ebft n\u1ed1i IPv6 t\u1eeb ISP nh\u01b0ng mu\u1ed1n tri\u1ec3n khai v\u00e0 ki\u1ec3m tra ho\u1ea1t \u0111\u1ed9ng c\u1ee7a 3 ph\u01b0\u01a1ng ph\u00e1p c\u1ea5p ph\u00e1t \u0111\u1ecba ch\u1ec9 IPv6 cho thi\u1ebft b\u1ecb (client) bao g\u1ed3m:<\/p>\n\n\n\n

    1\/ SLAAC (Stateless Address Autoconfiguration):<\/strong><\/span><\/h2><\/div><\/div><\/div>\n\n\n\n
      \n
    • Thi\u1ebft b\u1ecb client t\u1ef1 t\u1ea1o \u0111\u1ecba ch\u1ec9 IPv6 d\u1ef1a v\u00e0o prefix \u0111\u01b0\u1ee3c qu\u1ea3ng b\u00e1 t\u1eeb firewall.<\/li>\n\n\n\n
    • Kh\u00f4ng c\u1ea7n DHCPv6 server c\u1ea5p \u0111\u1ecba ch\u1ec9.<\/li>\n\n\n\n
    • Ph\u00f9 h\u1ee3p v\u1edbi m\u00f4i tr\u01b0\u1eddng \u0111\u01a1n gi\u1ea3n, kh\u00f4ng y\u00eau c\u1ea7u qu\u1ea3n l\u00fd \u0111\u1ecba ch\u1ec9 ch\u1eb7t ch\u1ebd.<\/li>\n<\/ul>\n\n\n\n

      2\/ DHCPv6 (Stateful):<\/strong><\/strong><\/span><\/h2><\/div><\/div><\/div>\n\n\n\n
        \n
      • Sophos Firewall \u0111\u00f3ng vai tr\u00f2 DHCPv6 server v\u00e0 c\u1ea5p \u0111\u1ecba ch\u1ec9 IPv6 tr\u1ef1c ti\u1ebfp cho c\u00e1c thi\u1ebft b\u1ecb.<\/li>\n\n\n\n
      • C\u1ea5u h\u00ecnh ph\u00f9 h\u1ee3p v\u1edbi c\u00e1c m\u00f4i tr\u01b0\u1eddng y\u00eau c\u1ea7u ki\u1ec3m so\u00e1t v\u00e0 ghi log \u0111\u1ecba ch\u1ec9 IP.<\/li>\n<\/ul>\n\n\n\n

        3\/ SLAAC + DHCPv6 Stateless:<\/strong><\/strong><\/span><\/h2><\/div><\/div><\/div>\n\n\n\n
          \n
        • Thi\u1ebft b\u1ecb client v\u1eabn t\u1ef1 t\u1ea1o \u0111\u1ecba ch\u1ec9 IPv6 b\u1eb1ng SLAAC.<\/li>\n\n\n\n
        • DHCPv6 server ch\u1ec9 c\u1ea5p c\u00e1c th\u00f4ng tin ph\u1ee5 nh\u01b0 DNS, NTP.<\/li>\n\n\n\n
        • Ph\u00f9 h\u1ee3p khi c\u1ea7n s\u1ef1 linh ho\u1ea1t c\u1ee7a SLAAC nh\u01b0ng v\u1eabn mu\u1ed1n b\u1ed5 sung th\u00f4ng tin m\u1ea1ng.<\/li>\n<\/ul>\n\n\n\n

          M\u1ee5c ti\u00eau: <\/strong>ki\u1ec3m tra, \u0111\u00e1nh gi\u00e1 v\u00e0 hi\u1ec3u r\u00f5 c\u01a1 ch\u1ebf ho\u1ea1t \u0111\u1ed9ng, c\u1ea5u h\u00ecnh v\u00e0 s\u1ef1 kh\u00e1c nhau gi\u1eefa c\u00e1c ph\u01b0\u01a1ng ph\u00e1p tr\u00ean trong c\u00f9ng m\u1ed9t m\u00f4 h\u00ecnh lab n\u1ed9i b\u1ed9, t\u1eeb \u0111\u00f3 chu\u1ea9n b\u1ecb cho vi\u1ec7c tri\u1ec3n khai IPv6 th\u1ef1c t\u1ebf khi c\u00f3 prefix t\u1eeb ISP.<\/p>\n\n\n\n

          IV – M\u00f4 h\u00ecnh<\/span><\/h2><\/div><\/div><\/div>\n\n\n
          \n
          \"\"<\/figure>\n<\/div>\n\n\n

          V – H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh<\/span><\/h2><\/div><\/div><\/div>\n\n\n\n

          B\u01b0\u1edbc 1: C\u1ea5u h\u00ecnh tr\u00ean Firewall<\/strong><\/span><\/h2><\/div><\/div><\/div>\n\n\n\n
            \n
          • V\u00e0o m\u1ee5c Network -> Add Interface<\/strong><\/li>\n<\/ul>\n\n\n
            \n
            \"\"<\/figure>\n<\/div>\n\n\n
              \n
            • Name: <\/strong>\u0110\u1eb7t t\u00ean rule<\/li>\n\n\n\n
            • Hardware: <\/strong>Ch\u1ecdn Port mu\u1ed1n c\u1ea5u h\u00ecnh<\/li>\n\n\n\n
            • Tick ch\u1ecdn m\u1ee5c IPv6 configuration<\/strong><\/li>\n\n\n\n
            • IP assignment:<\/strong> Ch\u1ecdn Static v\u00ec ch\u01b0a c\u00f3 ISP c\u1ea5p m\u1ea1ng wan ra internet<\/li>\n\n\n\n
            • Ipv6\/prefix*:<\/strong> \u0110\u1eb7t d\u00e3y m\u1ea1ng ipv6 m\u00e0 b\u1ea1n mu\u1ed1n<\/li>\n<\/ul>\n\n\n
              \n
              \"\"<\/figure>\n<\/div>\n\n\n

              B\u01b0\u1edbc 2: V\u00e0o m\u1ee5c IPv6 router advertisement<\/strong><\/strong><\/span><\/h2><\/div><\/div><\/div>\n\n\n\n
                \n
              • Interface<\/strong>: Ch\u1ecdn port c\u1ea5p ipv6, n\u01a1i g\u00f3i RA s\u1ebd \u0111\u01b0\u1ee3c g\u1eedi ra<\/li>\n\n\n\n
              • Min Advertisement interval:<\/strong> Th\u1eddi gian t\u1ed1i thi\u1ec3u gi\u1eefa hai g\u00f3i RA, gi\u00fap gi\u1ea3m b\u1edbt l\u01b0u l\u01b0\u1ee3ng qu\u1ea3ng b\u00e1<\/li>\n\n\n\n
              • Max Advertisement interval:<\/strong> Th\u1eddi gian t\u1ed1i \u0111a gi\u1eefa c\u00e1c g\u00f3i RA. Trong kho\u1ea3ng n\u00e0y, firewall s\u1ebd g\u1eedi RA<\/li>\n\n\n\n
              • Default gateway:<\/strong> Cho ph\u00e9p firewall cung c\u1ea5p \u0111\u1ecba ch\u1ec9 c\u1ed5ng m\u1eb7c \u0111\u1ecbnh (gateway) cho c\u00e1c thi\u1ebft b\u1ecb IPv6 trong m\u1ea1ng<\/li>\n\n\n\n
              • Managed flag:<\/strong> Th\u00f4ng client r\u1eb1ng c\u1ea7n d\u00f9ng DHCPv6 \u0111\u1ec3 nh\u1eadn \u0111\u1ecba ch\u1ec9 IP<\/li>\n\n\n\n
              • On-link:<\/strong> Cho ph\u00e9p client bi\u1ebft r\u1eb1ng subnet n\u00e0y c\u00f3 th\u1ec3 g\u1eedi g\u00f3i tr\u1ef1c ti\u1ebfp (kh\u00f4ng c\u1ea7n router trung gian)<\/li>\n\n\n\n
              • Other flag: <\/strong>Th\u00f4ng b\u00e1o r\u1eb1ng c\u00f3 DHCPv6 server cung c\u1ea5p c\u00e1c th\u00f4ng tin ph\u1ee5 DNS, NTP<\/li>\n\n\n\n
              • Autonomous: <\/strong>Cho ph\u00e9p client t\u1ef1 t\u1ea1o \u0111\u1ecba ch\u1ec9 IP b\u1eb1ng SLAAC t\u1eeb prefix \u0111\u01b0\u1ee3c qu\u1ea3ng b\u00e1<\/li>\n\n\n\n
              • Preferred lifetime:<\/strong> Th\u1eddi gian \u01b0u ti\u00ean s\u1eed d\u1ee5ng \u0111\u1ecba ch\u1ec9 IPv6, sau \u0111\u00f3 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c l\u00e0m m\u1edbi<\/li>\n\n\n\n
              • Valid lifetime: <\/strong>Th\u1eddi gian h\u1ee3p l\u1ec7 c\u1ee7a \u0111\u1ecba ch\u1ec9 IPv6. H\u1ebft th\u1eddi gian n\u00e0y, \u0111\u1ecba ch\u1ec9 s\u1ebd b\u1ecb g\u1ee1 b\u1ecf n\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c gia h\u1ea1n<\/li>\n<\/ul>\n\n\n\n

                \u2192 V\u1edbi c\u1ea3 3 c\u1edd \u0111\u1ec1u b\u1eadt nh\u01b0 tr\u00ean \u2192 client c\u00f3 th\u1ec3 t\u1ef1 t\u1ea1o \u0111\u1ecba ch\u1ec9 IP b\u1eb1ng SLAAC<\/strong> v\u00e0<\/strong> c\u0169ng c\u00f3 th\u1ec3 nh\u1eadn IP v\u00e0 DNS t\u1eeb DHCPv6 Server<\/strong> n\u1ebfu c\u00f3.<\/p>\n\n\n

                \n
                \"\"<\/figure>\n<\/div>\n\n\n
                  \n
                • \u1ede \u0111\u00e2y m\u00ecnh test th\u1eed ph\u01b0\u01a1ng ph\u00e1p SLAAC<\/strong> tr\u01b0\u1edbc, b\u1ecf tick ch\u1ecdn M v\u1edbi O v\u00e0 \u0111\u1eb7t ip t\u0129nh cho client.<\/li>\n<\/ul>\n\n\n
                  \n
                  \"\"<\/figure>\n<\/div>\n\n\n
                    \n
                  • Tr\u00ean m\u00e1y client \u0111\u1eb7t ip t\u0129nh<\/li>\n<\/ul>\n\n\n
                    \n
                    \"\"<\/figure>\n<\/div>\n\n\n
                      \n
                    • Sau \u0111\u00f3 d\u00f9ng l\u1ec7nh ping \u0111\u1ebfn default gateway c\u1ee7a sophos firewall tr\u00ean cmd.Ph\u01b0\u01a1ng ph\u00e1p SLAAC th\u00e0nh c\u00f4ng.<\/li>\n<\/ul>\n\n\n
                      \n
                      \"\"<\/figure>\n<\/div>\n\n\n

                      \u2192 \u01afu \u0111i\u1ec3m c\u1ee7a SLAAC:<\/strong> Kh\u00f4ng c\u1ea7n DHCPv6, D\u1ec5 tri\u1ec3n khai, kh\u00f4ng c\u1ea7n server, Ph\u00f9 h\u1ee3p cho m\u1ea1ng nh\u1ecf, \u0111\u01a1n gi\u1ea3n<\/p>\n\n\n\n

                      <\/p>\n","protected":false},"excerpt":{"rendered":"

                      IPv6 l\u00e0 th\u1ebf h\u1ec7 \u0111\u1ecba ch\u1ec9 IP m\u1edbi thay th\u1ebf cho IPv4 v\u1edbi kh\u00f4ng gian \u0111\u1ecba ch\u1ec9 g\u1ea7n nh\u01b0 v\u00f4 h\u1ea1n. Trong m\u1ea1ng n\u1ed9i b\u1ed9, vi\u1ec7c tri\u1ec3n khai IPv6 gi\u00fap th\u1eed nghi\u1ec7m c\u00e1c k\u1ef9 thu\u1eadt m\u1edbi nh\u01b0 DHCPv6, SLAAC, router advertisement, v\u00e0 chu\u1ea9n b\u1ecb cho kh\u1ea3 n\u0103ng m\u1edf r\u1ed9ng trong t\u01b0\u01a1ng lai. Sophos Firewall h\u1ed7 […]<\/p>\n","protected":false},"author":2,"featured_media":24559,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[617,70,618],"tags":[334],"class_list":["post-24568","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-case-study-thuc-te","category-firewall","category-huong-dan","tag-sophos-firewall","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/24568","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=24568"}],"version-history":[{"count":1,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/24568\/revisions"}],"predecessor-version":[{"id":25573,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/24568\/revisions\/25573"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/24559"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=24568"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=24568"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=24568"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}