Skip to main content
cheng_yang999
New Member
February 10, 2015
Question

Does foritgate support ipv6 6to4 mechanism ?

  • February 10, 2015
  • 1 reply
  • 6371 views

 

According to below link wiki explain the 6to4 mechanism.

http://en.wikipedia.org/wiki/6to4

I want set foritigate to be 6to4 router.

For example:

To assume my public ip is 192.0.2.4. so the ipv6 prefix is 2002:c000:0204::/48.

Then I expect to allocate various of sub network to individual interface of fortigate.

Ex: lan1 2002:c000:0204:1::/64

   lan2 2002:c000:0204:2::/64

              :

              :

            :

 

Could fortiage be able to build as below architecture? If it is achieved. How to configure?

    1 reply

    emnoc
    New Member
    February 10, 2015

    True 6to4 encapsulation is not support in  fortigate FortiOS as far as I know. I know this topic came up a few times before in the past but what you can do;

     

    1: use  ipv6 over ipv4 tunnels to the remote ipv6-islands the tunnel could be GRE or  IPSEC-VPN

     

    2: use NAT64 for traffic to the ipv4 backbone

     

     

    That's how most of the ipv6 and ipv4 dual migrations seems to goes nowadays. Contact your Sales teams to inquiry on 6to4. The cool thing, you could still built this today but you would need a  6to4 gateway like a cisco router or linux host for the encapsulation. You can run multiple prefixes 2002c::  and your 2001:: assignment  for example and route  via the gateway to your other ipv6 islands.