IPv6 connectivity between FortiGate and FortiManager works correctly and the devices are reachable over IPv6. However, the VM license validation process fails and the FortiGate shows the license status as warning.
This issue is specific to IPv6 communication. The same configuration works as expected when IPv4 is used.
config system central-management
set type fortimanager
set serial-number "FMG-VMTMXXXXXXXX"
set fmg "2a02:XXXX:XXXX::XXX"
set fmg-source-ip6 2a02:XXXX:XXXX::X
config server-list
edit 1
set server-type update rating
set addr-type ipv6
set server-address6 2a02:XXXX:XXXX::XXX
next
edit 2
set server-type update rating
set addr-type ipv6
set server-address6 2a02:XXXX:XXXX::XXX
next
end
set include-default-servers disable
end
The FortiGate-VM shows the license in warning state.
get system status
Version: FortiGate-VM64 v7.4.11,build2878,260126 (GA.M)
First GA patch build date: 230509
Current Security Level: High
Firmware Signature: certified
Serial-Number: FGVM1VTMXXXXXXXX
License Status: Warning
The debug on the FortiGate confirms the license validation failure:
diagnose debug application cloudinit -1
diagnose debug enable
vmlic skip [2a02:XXXX:XXXX::X]
vmlic skip [2a02:XXXX:XXXX::X]
vmlic add [2a02:XXXX:XXXX::X]
vmlic setup [2a02:XXXX:XXXX::X]
bind client addr error:97
The issue is specific to IPv6 communication between FortiGate-VM and FortiManager during the VM license validation process.
The issue has been identified and has been resolved on the FortiOS versions 7.4.12, 7.6.7 and 8.0.0.
|