Technical Tip: SD-WAN support added for IPv6 in FortiOS v6.0 and later
Description
This article discusses the historical introduction of IPv6 support for SD-WAN on the FortiGate.
Scope
FortiOS v6.0 and later.
Solution
Starting in FortiOS v6.0 and Change #460255, the FortiGate now supports IPv6 for SD-WAN. This includes support for all load-balancing methods, health checks, and rules for traffic routing according to Source/Destination address and service.
Note: SD-WAN for IPv6 support is only available for FortiGate models running Linux kernel version 3.2 and above, so older models such as the FortiGate-200D and 70D do not support this feature.
The following shows the new CLI available for SD-WAN with IPv6:
Configuring SD-WAN member interfaces:
config system virtual-wan-link
config members
edit <sequence-number>
set interface <interface-name>
set gateway6 <gateway-address>
next
end
end
Configuring SD-WAN static routes:
config router static6
edit <id>
set virtual-wan-link enable
next
end
Configuring health-checks:
config system virtual-wan-link
config health-check
edit <health-check-name>
set address-mode ipv6
set protocol ping6
next
end
end
Configuring SD-WAN Rules/service entries:
config system virtual-wan-link
config service
edit <priority-rule-ID>
set name <rule-name>
set addr-mode ipv6
set member <sequence-number>
set dst6 <destination-address-name>
set src6 <source-address-name>
next
end
end
Configuring firewall policies:
config firewall policy6
edit <id>
set srcintf <Source interface>
set dstintf virtual-wan-link
set dstaddr all
set srcaddr all
set action accept
set status enable
next
end
Related documents: