IPv6 VIPs

To add IPv6 VIPs:

1. Configure the External IP Address/Range.

   There are two fields. If there is a single IP address, use that address in both fields. This will be the address on the outside of the network that is usually the public address of the server. Enter the address in the standard IPv6 format.

2. Configure the Mapped IP Address/Range. This will be the address that the traffic is being directed to.

   There are two fields. If there is a single IP address, use that address in both fields. Enter the address in the standard IPv6 format.

   In the Optional Filters

3. Disable/Enable the Optional Filters.

   If only specific IP addresses and/or services are allowed to be the source for traffic using the VIP, enable the Optional Filters.

4. To specify an allowed address enter the value in the field labeled Source Address. The value can be formatted in three different ways:
   • Source IP - Use the standard format for a single IP address
   • Range - Enter the first and last members of the range
   • Subnet - Enter the IP address of the broadcast address for the subnet.

   To add additional addresses, click on the "+" below the last field with an address. To subtract an address, click on the "X" next to the field you wish to delete.

5. Disable/Enable Port Forwarding. If only the traffic for a specific port or port range is being forwarded, enable this setting.
6. Select the Protocol from
   • TCP
   • UDP
   • SCTP
7. Configure the External Service Port. This is the port(s) on the external interface of the FortiGate (the destination port in the header of the packets). The first field is for the first port in the range the second is for the last port in the range. As you enter a value in the first field, the second field will auto populate with the same number, working on the premise that a single port is common. Just edit the second field to extend the range.
8. Configure the setting Map to Port.This will be the listening port on the device located on the internal side of the network. It does not have to be the same as the External Service Port. The first field is for the first port in the range the second is for the last port in the range. As you enter a value in the first field, the second field will auto populate with the same number, working on the premise that a single port is common. Just edit the second field to extend the range.
9. Press OK.