Hi All,

after years of waiting i am very happy to finally have IPv6 prefix delegation feature on ASA 9.6.2.

(it was badly needed for SMB or small retailer shops, to deal with dynamic isp prefixes)

Seems to work as expected so far.

Now i am wondering how to write firewall rules which make sense ?

On Routers we have wildcard masks in ACLs, we can compensate for the dynamic prefix -

but on ASA we have not....

Any suggestions how to write firewalls rules for delegated prefixes which were obtained by

prefix delegation ?

In my oppinion it makes so real sense to have prefix delegation on a firewall without firewal-rule support...

I am missing the option to use my prefix placeholder for firewall rules, like

permit ip prefix-obtained-by-isp,AA:0:0:01/64 something like that...

Any hints on this ?