Skip to main content
micahawitt
micahawitt
New Member
April 16, 2020
Solved

IPV6

  • April 16, 2020
  • 1 reply
  • 18571 views

Forgive if this is loaded somewhere else.

 

I'm running into a snag here.  I am currently on Spectrum and getting a /128 from them.  According to my WAN1 interface.  

 

I am trying to get the DHCP to passthrough to my clients on a vlan, anyone have any luck with this?

    Best answer by emnoc

    Did you speak with your provider? They will tell you what size prefix is belng delegated , typically /48 or /56 and then you configure the fortigate for the ipv6 delegation on the wan and you pass a prefix in that delegation to your inside lans

     

    e.g

     

    config sys inteface

         edit wan1

            config ipv6

              set ipv6 dhcp-prefix-delegation enable

              set dhcp6-prefix-hint 2001:db8:44 /56

    end

     

     

     Once you have the assignment, you use slacc on your internal lans for assignments of the /64 to the hosts machines.

     

       config sys int 

           edit port1

               config ipv6

                      set ip6-allowaccess ssh ping https

                      set ip6-mode delegate

                      set ip6-upstream wan1

          end

     

    Yes it's really that easy you need to speak to your ISP

     

    Ken Felix

     

     

     

    1 reply

    mjcrevier
    mjcrevier
    New Member
    April 16, 2020

    Do a search on configuring IPv6 prefix-delegation on your Fortigate.

    emnoc
    emnoc
    New Member
    April 16, 2020

    You need a fortiOS version that support IPV6PD and what is the service provider giving you ( e.g a /48 ) ?

     

    Ken Felix

    lobstercreed
    lobstercreed
    New Member
    April 17, 2020

    Hey Micah,

     

    I've actually done this successfully with Spectrum.  This is where I found the most help: https://www.reddit.com/r/fortinet/comments/4p74xi/541_and_dhcpv6pd_prefix_hint/

     

    Here is what I ended up configuring (single LAN for now).  On my WAN interface:

     

    edit "wan1"
            set mode dhcp
            set alias "Charter"
            set role wan
            config ipv6
                set ip6-mode dhcp
                set ip6-allowaccess ping https
                set dhcp6-prefix-delegation enable
                set dhcp6-prefix-hint ::/56
            end
        next

     

    Then on my internal interface:

     


     
     config ipv6
                set ip6-mode delegated
                set ip6-send-adv enable
                set ip6-other-flag enable
                set ip6-upstream-interface "wan1"
                set ip6-subnet ::1/64
                config ip6-delegated-prefix-list
                    edit 1
                        set upstream-interface "wan1"
                        set autonomous-flag enable
                        set onlink-flag enable
                        set subnet 0:0:0:1::/64
                    next
                end
           end

     

     

     Hope it helps!  - Daniel

    Terms & ConditionsAccessibility statement