How to disable IPv6 on Ethernet cards for auditing purposes for RSA Authentication Manager 8.x
Originally Published: 2016-06-10
Last Modified: 2022-06-20
Article Number
000067855
Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
 

Issue
Due to PCI compliance requirements, some customers need to disable IPv6 if it is not used.
Resolution

Before continuing, please double check that you do not need IPv6 to communicate with your agents.

 
  1. Launch an SSH client, such as PuTTY.
  2. Login to the primary Authentication Manager server as rsaadmin and enter the operating system password.

Note that during Quick Setup another user name may have been selected. Use that user name to login.

  1. Switch to root:
sudo su - root
  1. Edit sysctl.conf 
vi /etc/sysctl.conf
  1.  Press i to enter Insert mode and add the following line at the end:
net.ipv6.conf.eth0.disable_ipv6 = 1
where eth0 is the interface which shows the ipv6 in the ifconfig command.
  1. Press Escape then type :wq! to save and close the file.
  2. Restart sysctl:
sysctl -p
  1. Restart network service.
service network restart
Notes
This technique disables IPv6 on interfaces, without disabling kernel modules that might overlap.
Don't see what you're looking for?