Disable IPv6 on ethernet cards for audit compliance
2 years ago
Originally Published: 2016-02-18
Article Number
000065033
Applies To
  • Security Analytics 10.x
Issue
  • Due to PCI DSS standards, some customers need to disable IPv6 if not used.
  • This technique disables IPv6 on interfaces, without the need of disable kernel modules that might overlap.
  • Please make sure that you really do not need IPv6 to communicate with any other devices before attempting this.
Tasks
  • Login to your machine as root user.
  • Open the file   /etc/sysctl.conf  using "vi" or any text editor.
  • Add/edit this line.
net.ipv6.conf.eth0.disable_ipv6 = 1
 
  • Make sure to replace "eth0" with the network card in question.
  • Save and exit.
  • Finally
    # sysctl -p

    to push configuration then restart network services.
Notes
  • Please make sure that you really do not need IPv6 to communicate with any other devices before attempting this.
  • Please make sure you are running EL6, to check this you can run the below command and make sure result is 6.x
# cat /etc/centos-release
CentOS release 6.7 (Final)