GUI support for configuring IPv6

FortiOS 7.0.0 adds GUI support for configuring IPv6 settings for IPv6 MAC address, SNMP, DHCPv6 server and client, DHCPv6 SLAAC and prefix delegation. Updates include:

• When IPv6 is enabled, a user can view, edit, and create IPv6 host entries.
• General IPv6 options can be set on the Interface page, including the ability to configure SLAAC and DHCPv6.
• Ability to retrieve IPv6 information for a DHCPv6 client similar to the existing DHCP support for IPv4.
• IPv6 MAC is available form the address creation context menu.

The following lists example scenarios for using these features.

Enabling autoconfiguration with DHCPv6 stateless server

IPv6 must be enabled in System > Feature Visibility.

In this scenario, FortiGate A (server) is connected to FortiGate B (client).

To enable IPv6 autoconfiguration with DHCPv6 stateless server:

1. Configure FortiGate A:
   1. On FortiGate A, go to Network > Interfaces.
   2. Edit the desired server interface.
   3. Select Manual for IPv6 addressing mode.
   4. Enable Stateless Address Auto-configuration (SLAAC).
   5. Enable IPv6 prefix list.
   6. Populate the IPv6 Address/Prefix and IPv6 prefix fields with the desired prefix.
   7. Click OK.
2. Configure FortiGate B:
   1. On FortiGate B, go to Network > Interfaces.
   2. Edit the server interface.
   3. Enable Auto configure IPv6 address. FortiGate B uses the prefix that it obtains from the server interface and automatically generates an IPv6 address.

Configuring a DHCPv6 stateful server

In this scenario, FortiGate A (server) is connected to FortiGate B (client).

To configure a DHCPv6 stateful server:

1. Configure FortiGate A:
   1. On FortiGate A, go to Network > Interfaces.
   2. Edit the desired server interface.
   3. Enable DHCPv6 Server.
   4. In the IPv6 subnet field, enter the desired subnet.
   5. For DNS service, select Specify. Enter the desired DNS service address.
   6. Enable Stateful server.
   7. For IP mode, select IP Range.
   8. In the Address range field, enter the desired IP address range.
   9. Click OK.

      

2. Configure FortiGate B:
   1. On FortiGate B, go to Network > Interfaces.
   2. Edit the server interface.
   3. Set IPv6 addressing mode to DHCP. FortiGate B obtains and populates the interface address information from FortiGate A.

      

Configuring a delegated interface to obtain the IPv6 prefix from an upstream DHCPv6 server

In this scenario, a DHCPv6 server is connected to a FortiGate via an upstream interface. In this example, port1 is the upstream interface. This scenario configures a delegate interface (port2 in this example) to obtain the IPv6 prefix from the upstream interface.

To configure a delegated interface to obtain the IPv6 prefix from an upstream DHCPv6 server:

1. Go to Network > Interfaces.
2. Edit port1.
3. Enable DHCPv6 prefix delegation.
4. Click OK.
5. Edit port2.
6. Set IPv6 addressing mode to Delegated. The interface obtains the IPv6 prefix from the upstream DHCPv6 server and forms its IPv6 address using the subnet configured on the interface.

Configuring a downstream FortiGate to obtain the IPv6 prefix and DNS from an upstream DHCPv6 server

In this scenario, a DHCPv6 server is connected to FortiGate A via an upstream interface. In this example, port1 is the upstream interface. FortiGate A is connected to FortiGate B via a downstream interface (port2 in this example).

To configure a downstream FortiGate to obtain the IPv6 prefix and DNS from an upstream DHCPv6 server:

1. Configure the upstream interface:
   1. On FortiGate A, go to Network > Interfaces.
   2. Edit port1.
   3. For IPv6 addressing mode, select DHCP.
   4. Enable DHCPv6 prefix delegation.
   5. Click OK.

      

2. Configure the downstream interface:
   1. On FortiGate A, edit port2.
   2. Enable DHCPv6 Server.
   3. Set DNS service and IP mode to Delegated.
   4. Enable Stateful server.
   5. From the Upstream interface dropdown list, select port1.
   6. Click OK.

      

3. Configure the FortiGate B interface:
   1. On FortiGate B, go to Network > Interfaces.
   2. Edit the desired interface.
   3. Set IPv6 addressing mode to DHCP. FortiGate B obtains the IPv6 prefix and DNS from the DHCPv6 server.