diff --git a/templates/etc/60-disable_ipv6.conf.j2 b/templates/etc/60-disable_ipv6.conf.j2
new file mode 100644
index 0000000..855d03d
--- /dev/null
+++ b/templates/etc/60-disable_ipv6.conf.j2
@@ -0,0 +1,4 @@
+{% if rhel9cis_rule_3_1_1 and rhel9cis_ipv6_required %}
+net.ipv6.conf.all.disable_ipv6 = 1 
+net.ipv6.conf.default.disable_ipv6 = 1
+{% endif %}