Fortinet Document Library

Version:


Table of Contents

CLI Reference

6.2.1
Copy Link

Configure IPv6 OSPF.

  config router ospf6
      Description: Configure IPv6 OSPF.
      set abr-type [cisco|ibm|...]
      set auto-cost-ref-bandwidth {integer}
      set default-information-originate [enable|always|...]
      set log-neighbour-changes [enable|disable]
      set default-information-metric {integer}
      set default-information-metric-type [1|2]
      set default-information-route-map {string}
      set default-metric {integer}
      set router-id {ipv4-address-any}
      set spf-timers {user}
      set bfd [enable|disable]
      config area
          Description: OSPF6 area configuration.
          edit <id>
              set default-cost {integer}
              set nssa-translator-role [candidate|never|...]
              set stub-type [no-summary|summary]
              set type [regular|nssa|...]
              set nssa-default-information-originate [enable|disable]
              set nssa-default-information-originate-metric {integer}
              set nssa-default-information-originate-metric-type [1|2]
              set nssa-redistribution [enable|disable]
              set authentication [none|ah|...]
              set key-rollover-interval {integer}
              set ipsec-auth-alg [md5|sha1|...]
              set ipsec-enc-alg [null|des|...]
              config ipsec-keys
                  Description: IPsec authentication and encryption keys.
                  edit <spi>
                      set auth-key {password}
                      set enc-key {password}
                  next
              end
              config range
                  Description: OSPF6 area range configuration.
                  edit <id>
                      set prefix6 {ipv6-network}
                      set advertise [disable|enable]
                  next
              end
              config virtual-link
                  Description: OSPF6 virtual link configuration.
                  edit <name>
                      set dead-interval {integer}
                      set hello-interval {integer}
                      set retransmit-interval {integer}
                      set transmit-delay {integer}
                      set peer {ipv4-address-any}
                      set authentication [none|ah|...]
                      set key-rollover-interval {integer}
                      set ipsec-auth-alg [md5|sha1|...]
                      set ipsec-enc-alg [null|des|...]
                      config ipsec-keys
                          Description: IPsec authentication and encryption keys.
                          edit <spi>
                              set auth-key {password}
                              set enc-key {password}
                          next
                      end
                  next
              end
          next
      end
      config ospf6-interface
          Description: OSPF6 interface configuration.
          edit <name>
              set area-id {ipv4-address-any}
              set interface {string}
              set retransmit-interval {integer}
              set transmit-delay {integer}
              set cost {integer}
              set priority {integer}
              set dead-interval {integer}
              set hello-interval {integer}
              set status [disable|enable]
              set network-type [broadcast|point-to-point|...]
              set bfd [global|enable|...]
              set mtu {integer}
              set mtu-ignore [enable|disable]
              set authentication [none|ah|...]
              set key-rollover-interval {integer}
              set ipsec-auth-alg [md5|sha1|...]
              set ipsec-enc-alg [null|des|...]
              config ipsec-keys
                  Description: IPsec authentication and encryption keys.
                  edit <spi>
                      set auth-key {password}
                      set enc-key {password}
                  next
              end
              config neighbor
                  Description: OSPFv3 neighbors are used when OSPFv3 runs on non-broadcast media
                  edit <ip6>
                      set poll-interval {integer}
                      set cost {integer}
                      set priority {integer}
                  next
              end
          next
      end
      config redistribute
          Description: Redistribute configuration.
          edit <name>
              set status [enable|disable]
              set metric {integer}
              set routemap {string}
              set metric-type [1|2]
          next
      end
      set passive-interface <name1>, <name2>, ...
      config summary-address
          Description: IPv6 address summary configuration.
          edit <id>
              set prefix6 {ipv6-network}
              set advertise [disable|enable]
              set tag {integer}
          next
      end
  end

config router ospf6

Parameter Name Description Type Size
abr-type Area border router type.
cisco: Cisco.
ibm: IBM.
standard: Standard.
option -
auto-cost-ref-bandwidth Reference bandwidth in terms of megabits per second. integer Minimum value: 1 Maximum value: 1000000
default-information-originate Enable/disable generation of default route.
enable: Enable setting.
always: Always advertise the default router.
disable: Disable setting.
option -
log-neighbour-changes Enable logging of OSPFv3 neighbour's changes
enable: Enable setting.
disable: Disable setting.
option -
default-information-metric Default information metric. integer Minimum value: 1 Maximum value: 16777214
default-information-metric-type Default information metric type.
1: Type 1.
2: Type 2.
option -
default-information-route-map Default information route map. string Maximum length: 35
default-metric Default metric of redistribute routes. integer Minimum value: 1 Maximum value: 16777214
router-id A.B.C.D, in IPv4 address format. ipv4-address-any Not Specified
spf-timers SPF calculation frequency. user Not Specified
bfd Enable/disable Bidirectional Forwarding Detection (BFD).
enable: Enable Bidirectional Forwarding Detection (BFD).
disable: Disable Bidirectional Forwarding Detection (BFD).
option -
passive-interface <name> Passive interface configuration.
Passive interface name.
string Maximum length: 79
Parameter Name Description Type Size
default-cost Summary default cost of stub or NSSA area. integer Minimum value: 0 Maximum value: 16777215
nssa-translator-role NSSA translator role type.
candidate: Candidate.
never: Never.
always: Always.
option -
stub-type Stub summary setting.
no-summary: No summary.
summary: Summary.
option -
type Area type setting.
regular: Regular.
nssa: NSSA.
stub: Stub.
option -
nssa-default-information-originate Enable/disable originate type 7 default into NSSA area.
enable: Enable originate type 7 default into NSSA area.
disable: Disable originate type 7 default into NSSA area.
option -
nssa-default-information-originate-metric OSPFv3 default metric. integer Minimum value: 0 Maximum value: 16777214
nssa-default-information-originate-metric-type OSPFv3 metric type for default routes.
1: Type 1.
2: Type 2.
option -
nssa-redistribution Enable/disable redistribute into NSSA area.
enable: Enable redistribute into NSSA area.
disable: Disable redistribute into NSSA area.
option -
authentication Authentication mode.
none: Disable authentication.
ah: Authentication Header.
esp: Encapsulating Security Payload.
option -
key-rollover-interval Key roll-over interval. integer Minimum value: 300 Maximum value: 216000
ipsec-auth-alg Authentication algorithm.
md5: MD5.
sha1: SHA1.
sha256: SHA256.
sha384: SHA384.
sha512: SHA512.
option -
ipsec-enc-alg Encryption algorithm.
null: No encryption.
des: DES.
3des: 3DES.
aes128: AES128.
aes192: AES192.
aes256: AES256.
option -

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config range

Parameter Name Description Type Size
prefix6 IPv6 prefix. ipv6-network Not Specified
advertise Enable/disable advertise status.
disable: disable
enable: enable
option -

config virtual-link

Parameter Name Description Type Size
dead-interval Dead interval. integer Minimum value: 1 Maximum value: 65535
hello-interval Hello interval. integer Minimum value: 1 Maximum value: 65535
retransmit-interval Retransmit interval. integer Minimum value: 1 Maximum value: 65535
transmit-delay Transmit delay. integer Minimum value: 1 Maximum value: 65535
peer A.B.C.D, peer router ID. ipv4-address-any Not Specified
authentication Authentication mode.
none: Disable authentication.
ah: Authentication Header.
esp: Encapsulating Security Payload.
area: Use the routing area's authentication configuration.
option -
key-rollover-interval Key roll-over interval. integer Minimum value: 300 Maximum value: 216000
ipsec-auth-alg Authentication algorithm.
md5: MD5.
sha1: SHA1.
sha256: SHA256.
sha384: SHA384.
sha512: SHA512.
option -
ipsec-enc-alg Encryption algorithm.
null: No encryption.
des: DES.
3des: 3DES.
aes128: AES128.
aes192: AES192.
aes256: AES256.
option -

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified
Parameter Name Description Type Size
area-id A.B.C.D, in IPv4 address format. ipv4-address-any Not Specified
interface Configuration interface name. string Maximum length: 15
retransmit-interval Retransmit interval. integer Minimum value: 1 Maximum value: 65535
transmit-delay Transmit delay. integer Minimum value: 1 Maximum value: 65535
cost Cost of the interface, value range from 0 to 65535, 0 means auto-cost. integer Minimum value: 0 Maximum value: 65535
priority priority integer Minimum value: 0 Maximum value: 255
dead-interval Dead interval. integer Minimum value: 1 Maximum value: 65535
hello-interval Hello interval. integer Minimum value: 1 Maximum value: 65535
status Enable/disable OSPF6 routing on this interface.
disable: Disable OSPF6 routing.
enable: Enable OSPF6 routing.
option -
network-type Network type.
broadcast: broadcast
point-to-point: point-to-point
non-broadcast: non-broadcast
point-to-multipoint: point-to-multipoint
point-to-multipoint-non-broadcast: point-to-multipoint and non-broadcast.
option -
bfd Enable/disable Bidirectional Forwarding Detection (BFD).
global: Use global configuration of Bidirectional Forwarding Detection (BFD).
enable: Enable Bidirectional Forwarding Detection (BFD) on this interface.
disable: Disable Bidirectional Forwarding Detection (BFD) on this interface.
option -
mtu MTU for OSPFv3 packets. integer Minimum value: 576 Maximum value: 65535
mtu-ignore Enable/disable ignoring MTU field in DBD packets.
enable: Ignore MTU field in DBD packets.
disable: Do not ignore MTU field in DBD packets.
option -
authentication Authentication mode.
none: Disable authentication.
ah: Authentication Header.
esp: Encapsulating Security Payload.
area: Use the routing area's authentication configuration.
option -
key-rollover-interval Key roll-over interval. integer Minimum value: 300 Maximum value: 216000
ipsec-auth-alg Authentication algorithm.
md5: MD5.
sha1: SHA1.
sha256: SHA256.
sha384: SHA384.
sha512: SHA512.
option -
ipsec-enc-alg Encryption algorithm.
null: No encryption.
des: DES.
3des: 3DES.
aes128: AES128.
aes192: AES192.
aes256: AES256.
option -

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config neighbor

Parameter Name Description Type Size
poll-interval Poll interval time in seconds. integer Minimum value: 1 Maximum value: 65535
cost Cost of the interface, value range from 0 to 65535, 0 means auto-cost. integer Minimum value: 0 Maximum value: 65535
priority priority integer Minimum value: 0 Maximum value: 255
Parameter Name Description Type Size
status status
enable: Enable setting.
disable: Disable setting.
option -
metric Redistribute metric setting. integer Minimum value: 0 Maximum value: 16777214
routemap Route map name. string Maximum length: 35
metric-type Metric type.
1: Type 1.
2: Type 2.
option -
Parameter Name Description Type Size
prefix6 IPv6 prefix. ipv6-network Not Specified
advertise Enable/disable advertise status.
disable: disable
enable: enable
option -
tag Tag value. integer Minimum value: 0 Maximum value: 4294967295

Configure IPv6 OSPF.

  config router ospf6
      Description: Configure IPv6 OSPF.
      set abr-type [cisco|ibm|...]
      set auto-cost-ref-bandwidth {integer}
      set default-information-originate [enable|always|...]
      set log-neighbour-changes [enable|disable]
      set default-information-metric {integer}
      set default-information-metric-type [1|2]
      set default-information-route-map {string}
      set default-metric {integer}
      set router-id {ipv4-address-any}
      set spf-timers {user}
      set bfd [enable|disable]
      config area
          Description: OSPF6 area configuration.
          edit <id>
              set default-cost {integer}
              set nssa-translator-role [candidate|never|...]
              set stub-type [no-summary|summary]
              set type [regular|nssa|...]
              set nssa-default-information-originate [enable|disable]
              set nssa-default-information-originate-metric {integer}
              set nssa-default-information-originate-metric-type [1|2]
              set nssa-redistribution [enable|disable]
              set authentication [none|ah|...]
              set key-rollover-interval {integer}
              set ipsec-auth-alg [md5|sha1|...]
              set ipsec-enc-alg [null|des|...]
              config ipsec-keys
                  Description: IPsec authentication and encryption keys.
                  edit <spi>
                      set auth-key {password}
                      set enc-key {password}
                  next
              end
              config range
                  Description: OSPF6 area range configuration.
                  edit <id>
                      set prefix6 {ipv6-network}
                      set advertise [disable|enable]
                  next
              end
              config virtual-link
                  Description: OSPF6 virtual link configuration.
                  edit <name>
                      set dead-interval {integer}
                      set hello-interval {integer}
                      set retransmit-interval {integer}
                      set transmit-delay {integer}
                      set peer {ipv4-address-any}
                      set authentication [none|ah|...]
                      set key-rollover-interval {integer}
                      set ipsec-auth-alg [md5|sha1|...]
                      set ipsec-enc-alg [null|des|...]
                      config ipsec-keys
                          Description: IPsec authentication and encryption keys.
                          edit <spi>
                              set auth-key {password}
                              set enc-key {password}
                          next
                      end
                  next
              end
          next
      end
      config ospf6-interface
          Description: OSPF6 interface configuration.
          edit <name>
              set area-id {ipv4-address-any}
              set interface {string}
              set retransmit-interval {integer}
              set transmit-delay {integer}
              set cost {integer}
              set priority {integer}
              set dead-interval {integer}
              set hello-interval {integer}
              set status [disable|enable]
              set network-type [broadcast|point-to-point|...]
              set bfd [global|enable|...]
              set mtu {integer}
              set mtu-ignore [enable|disable]
              set authentication [none|ah|...]
              set key-rollover-interval {integer}
              set ipsec-auth-alg [md5|sha1|...]
              set ipsec-enc-alg [null|des|...]
              config ipsec-keys
                  Description: IPsec authentication and encryption keys.
                  edit <spi>
                      set auth-key {password}
                      set enc-key {password}
                  next
              end
              config neighbor
                  Description: OSPFv3 neighbors are used when OSPFv3 runs on non-broadcast media
                  edit <ip6>
                      set poll-interval {integer}
                      set cost {integer}
                      set priority {integer}
                  next
              end
          next
      end
      config redistribute
          Description: Redistribute configuration.
          edit <name>
              set status [enable|disable]
              set metric {integer}
              set routemap {string}
              set metric-type [1|2]
          next
      end
      set passive-interface <name1>, <name2>, ...
      config summary-address
          Description: IPv6 address summary configuration.
          edit <id>
              set prefix6 {ipv6-network}
              set advertise [disable|enable]
              set tag {integer}
          next
      end
  end

config router ospf6

Parameter Name Description Type Size
abr-type Area border router type.
cisco: Cisco.
ibm: IBM.
standard: Standard.
option -
auto-cost-ref-bandwidth Reference bandwidth in terms of megabits per second. integer Minimum value: 1 Maximum value: 1000000
default-information-originate Enable/disable generation of default route.
enable: Enable setting.
always: Always advertise the default router.
disable: Disable setting.
option -
log-neighbour-changes Enable logging of OSPFv3 neighbour's changes
enable: Enable setting.
disable: Disable setting.
option -
default-information-metric Default information metric. integer Minimum value: 1 Maximum value: 16777214
default-information-metric-type Default information metric type.
1: Type 1.
2: Type 2.
option -
default-information-route-map Default information route map. string Maximum length: 35
default-metric Default metric of redistribute routes. integer Minimum value: 1 Maximum value: 16777214
router-id A.B.C.D, in IPv4 address format. ipv4-address-any Not Specified
spf-timers SPF calculation frequency. user Not Specified
bfd Enable/disable Bidirectional Forwarding Detection (BFD).
enable: Enable Bidirectional Forwarding Detection (BFD).
disable: Disable Bidirectional Forwarding Detection (BFD).
option -
passive-interface <name> Passive interface configuration.
Passive interface name.
string Maximum length: 79
Parameter Name Description Type Size
default-cost Summary default cost of stub or NSSA area. integer Minimum value: 0 Maximum value: 16777215
nssa-translator-role NSSA translator role type.
candidate: Candidate.
never: Never.
always: Always.
option -
stub-type Stub summary setting.
no-summary: No summary.
summary: Summary.
option -
type Area type setting.
regular: Regular.
nssa: NSSA.
stub: Stub.
option -
nssa-default-information-originate Enable/disable originate type 7 default into NSSA area.
enable: Enable originate type 7 default into NSSA area.
disable: Disable originate type 7 default into NSSA area.
option -
nssa-default-information-originate-metric OSPFv3 default metric. integer Minimum value: 0 Maximum value: 16777214
nssa-default-information-originate-metric-type OSPFv3 metric type for default routes.
1: Type 1.
2: Type 2.
option -
nssa-redistribution Enable/disable redistribute into NSSA area.
enable: Enable redistribute into NSSA area.
disable: Disable redistribute into NSSA area.
option -
authentication Authentication mode.
none: Disable authentication.
ah: Authentication Header.
esp: Encapsulating Security Payload.
option -
key-rollover-interval Key roll-over interval. integer Minimum value: 300 Maximum value: 216000
ipsec-auth-alg Authentication algorithm.
md5: MD5.
sha1: SHA1.
sha256: SHA256.
sha384: SHA384.
sha512: SHA512.
option -
ipsec-enc-alg Encryption algorithm.
null: No encryption.
des: DES.
3des: 3DES.
aes128: AES128.
aes192: AES192.
aes256: AES256.
option -

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config range

Parameter Name Description Type Size
prefix6 IPv6 prefix. ipv6-network Not Specified
advertise Enable/disable advertise status.
disable: disable
enable: enable
option -

config virtual-link

Parameter Name Description Type Size
dead-interval Dead interval. integer Minimum value: 1 Maximum value: 65535
hello-interval Hello interval. integer Minimum value: 1 Maximum value: 65535
retransmit-interval Retransmit interval. integer Minimum value: 1 Maximum value: 65535
transmit-delay Transmit delay. integer Minimum value: 1 Maximum value: 65535
peer A.B.C.D, peer router ID. ipv4-address-any Not Specified
authentication Authentication mode.
none: Disable authentication.
ah: Authentication Header.
esp: Encapsulating Security Payload.
area: Use the routing area's authentication configuration.
option -
key-rollover-interval Key roll-over interval. integer Minimum value: 300 Maximum value: 216000
ipsec-auth-alg Authentication algorithm.
md5: MD5.
sha1: SHA1.
sha256: SHA256.
sha384: SHA384.
sha512: SHA512.
option -
ipsec-enc-alg Encryption algorithm.
null: No encryption.
des: DES.
3des: 3DES.
aes128: AES128.
aes192: AES192.
aes256: AES256.
option -

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified
Parameter Name Description Type Size
area-id A.B.C.D, in IPv4 address format. ipv4-address-any Not Specified
interface Configuration interface name. string Maximum length: 15
retransmit-interval Retransmit interval. integer Minimum value: 1 Maximum value: 65535
transmit-delay Transmit delay. integer Minimum value: 1 Maximum value: 65535
cost Cost of the interface, value range from 0 to 65535, 0 means auto-cost. integer Minimum value: 0 Maximum value: 65535
priority priority integer Minimum value: 0 Maximum value: 255
dead-interval Dead interval. integer Minimum value: 1 Maximum value: 65535
hello-interval Hello interval. integer Minimum value: 1 Maximum value: 65535
status Enable/disable OSPF6 routing on this interface.
disable: Disable OSPF6 routing.
enable: Enable OSPF6 routing.
option -
network-type Network type.
broadcast: broadcast
point-to-point: point-to-point
non-broadcast: non-broadcast
point-to-multipoint: point-to-multipoint
point-to-multipoint-non-broadcast: point-to-multipoint and non-broadcast.
option -
bfd Enable/disable Bidirectional Forwarding Detection (BFD).
global: Use global configuration of Bidirectional Forwarding Detection (BFD).
enable: Enable Bidirectional Forwarding Detection (BFD) on this interface.
disable: Disable Bidirectional Forwarding Detection (BFD) on this interface.
option -
mtu MTU for OSPFv3 packets. integer Minimum value: 576 Maximum value: 65535
mtu-ignore Enable/disable ignoring MTU field in DBD packets.
enable: Ignore MTU field in DBD packets.
disable: Do not ignore MTU field in DBD packets.
option -
authentication Authentication mode.
none: Disable authentication.
ah: Authentication Header.
esp: Encapsulating Security Payload.
area: Use the routing area's authentication configuration.
option -
key-rollover-interval Key roll-over interval. integer Minimum value: 300 Maximum value: 216000
ipsec-auth-alg Authentication algorithm.
md5: MD5.
sha1: SHA1.
sha256: SHA256.
sha384: SHA384.
sha512: SHA512.
option -
ipsec-enc-alg Encryption algorithm.
null: No encryption.
des: DES.
3des: 3DES.
aes128: AES128.
aes192: AES192.
aes256: AES256.
option -

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config ipsec-keys

Parameter Name Description Type Size
auth-key Authentication key. password Not Specified
enc-key Encryption key. password Not Specified

config neighbor

Parameter Name Description Type Size
poll-interval Poll interval time in seconds. integer Minimum value: 1 Maximum value: 65535
cost Cost of the interface, value range from 0 to 65535, 0 means auto-cost. integer Minimum value: 0 Maximum value: 65535
priority priority integer Minimum value: 0 Maximum value: 255
Parameter Name Description Type Size
status status
enable: Enable setting.
disable: Disable setting.
option -
metric Redistribute metric setting. integer Minimum value: 0 Maximum value: 16777214
routemap Route map name. string Maximum length: 35
metric-type Metric type.
1: Type 1.
2: Type 2.
option -
Parameter Name Description Type Size
prefix6 IPv6 prefix. ipv6-network Not Specified
advertise Enable/disable advertise status.
disable: disable
enable: enable
option -
tag Tag value. integer Minimum value: 0 Maximum value: 4294967295