diff --git a/operations/experimental/enable-ipv6-egress.yml b/operations/experimental/enable-ipv6-egress.yml
new file mode 100755
index 000000000..f6a202d2f
--- /dev/null
+++ b/operations/experimental/enable-ipv6-egress.yml
@@ -0,0 +1,27 @@
+---
+- type: replace
+  path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/enable_ipv6?
+  value: true
+
+# --- Add IPv6 Security Groups ---
+- type: replace
+  path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/default_running_security_groups
+  value:
+  - public_networks
+  - dns
+  - ipv6_public_networks
+
+- type: replace
+  path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/default_staging_security_groups
+  value:
+  - public_networks
+  - dns
+  - ipv6_public_networks
+
+- type: replace
+  path: /instance_groups/name=api/jobs/name=cloud_controller_ng/properties/cc/security_group_definitions/-
+  value:
+    name: ipv6_public_networks
+    rules:
+    - destination: 2000::-3fff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
+      protocol: all
\ No newline at end of file