Fortinet black logo

Handbook

Firewall IPv6 address templates

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:240091
Download PDF

Firewall IPv6 address templates

You can use the IPv6 address templates to create new IPv6 addresses that share a prefix. Using templates for addresses reduces the chance of configuring an incorrect address due to a typographical error.

  • A standard IPv6 address can be divided into three parts:

[IPv6 network prefix] + [subnet segments] + [host address]

  • The subnet segments can be split into multiple 4-bit blocks called nibbles
  • Each subnet segments represent different geographical or organizational parts of the network. They are represented by 1 or more nibbles.

Example of a prefix:

2001:db8:1234:0000::/64

Section Description
The yellow highlighted characters Prefix (48 bits)
The green highlighted characters (zeros) Place holder for the subnet segments (16 bits)
The red highlighted characters Subnet mask

The 16 bits that make up the subnet segments can be more granular.

Example: 0011 1111 0000 1101

Segment Binary Hexadecimal
Site 0011 0x3
Subsite 1111 0xf
Subnet 0000 1101 0x0d

The resulting network portion of the address is:

2001:db8:1234:3f0d::/64

By changing the mask, the subnet segment could be increased.

2001:db8:1234:0000 0000::/48

2001:db8:1234:0000 0000 0000::/32

This makes more options available for the configuration of the subnet segments. Below is an example of a very basic template:

Using that template, you can see how the GUI could be used to quickly create address objects.

tooltip icon You can use the template to enter the subnet prefix alone. You don't have to use the segment portion of the template.

Firewall IPv6 address templates

You can use the IPv6 address templates to create new IPv6 addresses that share a prefix. Using templates for addresses reduces the chance of configuring an incorrect address due to a typographical error.

  • A standard IPv6 address can be divided into three parts:

[IPv6 network prefix] + [subnet segments] + [host address]

  • The subnet segments can be split into multiple 4-bit blocks called nibbles
  • Each subnet segments represent different geographical or organizational parts of the network. They are represented by 1 or more nibbles.

Example of a prefix:

2001:db8:1234:0000::/64

Section Description
The yellow highlighted characters Prefix (48 bits)
The green highlighted characters (zeros) Place holder for the subnet segments (16 bits)
The red highlighted characters Subnet mask

The 16 bits that make up the subnet segments can be more granular.

Example: 0011 1111 0000 1101

Segment Binary Hexadecimal
Site 0011 0x3
Subsite 1111 0xf
Subnet 0000 1101 0x0d

The resulting network portion of the address is:

2001:db8:1234:3f0d::/64

By changing the mask, the subnet segment could be increased.

2001:db8:1234:0000 0000::/48

2001:db8:1234:0000 0000 0000::/32

This makes more options available for the configuration of the subnet segments. Below is an example of a very basic template:

Using that template, you can see how the GUI could be used to quickly create address objects.

tooltip icon You can use the template to enter the subnet prefix alone. You don't have to use the segment portion of the template.