Created on ‎06-25-2009 10:36 AM Edited on ‎07-06-2022 09:49 AM By Anonymous
Purpose
Scope
FortiGate or VDOM operating in Nat/route mode.
Diagram
The following network scenario is used to illustrate this example.
Expectations, Requirements
Based on the diagram above, the following rules are defined.
Firmware version should be 4.1.0 or higher.
Configuration
config vdom edit root end config vdom edit traffic end config global config system global set vdom-admin enable end config system vdom-link edit "vdl" next end config system interface edit "port17" set vdom "traffic" set allowaccess ping https ssh http telnet set type physical config ipv6 set ip6-address fec0::147:16c/119 set ip6-allowaccess ping end next edit "vdl0" set vdom "root" set type vdom-link config ipv6 set ip6-address fe80::218:8bff:fe84:4223/64 set ip6-allowaccess ping end next edit "vdl1" set vdom "traffic" set type vdom-link config ipv6 set ip6-address fe80::218:8bff:fe84:4133/64 set ip6-allowaccess ping end next edit "port2-v208" set vdom "traffic" config ipv6 set ip6-address fec1::208:16c/119 set ip6-allowaccess ping end set interface "port2" set vlanid 208 next edit "port2-v18" set vdom "root" config ipv6 set ip6-address fec0::18:16c/119 set ip6-allowaccess ping end set interface "port2" set vlanid 18 next end |
config vdom edit root config router prefix-list6 edit "pl6_filter_static_distrib" config rule edit 1 set action deny set prefix6 "fec2::228:0000/119" unset ge unset le next edit 2 set prefix6 "any" unset ge unset le next end next end config router route-map edit "rm_filter_static_redistrib" config rule edit 1 set match-ip6-address "pl6_filter_static_distrib" next end next end config router static6 edit 1 set device "port2-v18" set gateway fec0::18:101 next edit 2 set device "port2-v18" set dst fed1::/126 set gateway fec0::18:101 next edit 3 set device "port2-v18" set dst fec2::228:0/119 set gateway fec0::18:101 next end config router ospf6 config area edit 0.0.0.0 next end config ospf6-interface edit "vdl0" set interface "vdl0" next edit "port2-v18" set interface "port2-v18" next end set passive-interface "port2-v18" config redistribute "connected" set status enable end config redistribute "static" set status enable set routemap "rm_filter_static_redistrib" end config redistribute "rip" end config redistribute "bgp" end set router-id 1.1.1.1 end |
config vdom edit traffic config router ospf6 config area edit 0.0.0.0 next end config ospf6-interface edit "vdl1" set interface "vdl1" next edit "port17" set interface "port17" next edit "port2-v208" set interface "port2-v208" next end set passive-interface "port2-v208" config redistribute "connected" set status enable end config redistribute "static" end config redistribute "rip" end config redistribute "bgp" end set router-id 2.2.2.2 end |
config system interface edit "port2" set vdom "root" set allowaccess ping https ssh http telnet set type physical config ipv6 set ip6-address fec2::224:72/119 set ip6-allowaccess ping end next edit "port5" set vdom "root" set allowaccess ping set type physical config ipv6 set ip6-address fec0::147:72/119 set ip6-allowaccess ping end next edit "port6" set vdom "root" set allowaccess ping https ssh http telnet set type physical config ipv6 set ip6-address fec0::146:72/119 set ip6-allowaccess ping https ssh end next end config router static6 edit 1 set device "port2" set dst fec2::226:0/119 set gateway fec2::224:1fe next end config router ospf6 config area edit 0.0.0.0 next edit 0.0.0.1 config range edit 1 set prefix6 fec0::/125 (#1) next end next end config ospf6-interface edit "port5" set interface "port5" next edit "port2" set interface "port2" next edit "port6" set area-id 0.0.0.1 set interface "port6" next end set passive-interface "port2" config redistribute "connected" end config redistribute "static" set status enable end config redistribute "rip" end config redistribute "bgp" end set router-id 3.3.3.3 end |
config system interface edit "port2" set vdom "root" set allowaccess ping set type physical config ipv6 set ip6-address fec0::146:136/119 set ip6-allowaccess ping https ssh end next edit "port5" set vdom "root" set allowaccess ping set type physical config ipv6 set ip6-address fec0::1/127 set ip6-allowaccess ping https ssh end next edit "port6" set vdom "root" set allowaccess ping set type physical config ipv6 set ip6-address fec0::5/127 set ip6-allowaccess ping https ssh end next end config router ospf6 config area edit 0.0.0.1 next end config ospf6-interface edit "port2" set area-id 0.0.0.1 set interface "port2" next edit "port5" set area-id 0.0.0.1 set interface "port5" next edit "port6" set area-id 0.0.0.1 set interface "port6" next end config redistribute "connected" end config redistribute "static" end config redistribute "rip" end config redistribute "bgp" end set router-id 4.4.4.4 end |
Verification
The following commands are used for verification
get router info6 routing-table diagnose ipv6 address list diagnose ipv6 neighbor-cache list get router info6 ospf status get router info6 ospf interface get router info6 ospf topology get router info6 ospf neighbor get router info6 ospf neighbor <neighbor router_id> get router info6 ospf route |
FGT620B-2 (root) # get router info6 routing-table IPv6 Routing Table Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - IS-IS, B - BGP Timers: Uptime S ::/0 [1/0] via fec0::18:101, port2-v18, 00:54:25 C ::1/128 via ::, root, 00:54:30 C fe80::/10 via ::, port2-v18, 00:54:30 C fe80::/64 via ::, vdl0, 00:54:30 O fec0::/125 [110/121] via fe80::218:8bff:fe84:4133, vdl0, 00:49:59 C fec0::18:0/119 via ::, port2-v18, 00:54:30 O fec0::146:0/119 [110/111] via fe80::218:8bff:fe84:4133, vdl0, 00:53:48 O fec0::147:0/119 [110/101] via fe80::218:8bff:fe84:4133, vdl0, 00:53:48 O fec1::208:0/119 [110/200] via fe80::218:8bff:fe84:4133, vdl0, 00:54:09 O fec2::224:0/119 [110/111] via fe80::218:8bff:fe84:4133, vdl0, 00:53:48 O fec2::226:0/119 [110/10] via fe80::218:8bff:fe84:4133, vdl0, 00:53:47 S fec2::228:0/119 [1/0] via fec0::18:101, port2-v18, 00:54:25 S fed1::/126 [1/0] via fec0::18:101, port2-v18, 00:54:25 FGT620B-2 (root) # diagnose ipv6 address list dev=33 devname=vsys_fgfm flag=P scope=254 prefix=128 addr=::1 dev=31 devname=vsys_ha flag=P scope=254 prefix=128 addr=::1 dev=29 devname=port2-v208 flag=P scope=200 prefix=119 addr=fec1::208:16c dev=25 devname=traffic flag=P scope=254 prefix=128 addr=::1 dev=23 devname=root flag=P scope=254 prefix=128 addr=::1 dev=30 devname=port2-v18 flag=P scope=200 prefix=119 addr=fec0::18:16c dev=2 devname=port17 flag=P scope=253 prefix=10 addr=fe80::209:fff:feb7:3c88 dev=28 devname=vdl1 flag=P scope=253 prefix=64 addr=fe80::218:8bff:fe84:4133 dev=2 devname=port17 flag=P scope=200 prefix=119 addr=fec0::147:16c dev=27 devname=vdl0 flag=P scope=253 prefix=64 addr=fe80::218:8bff:fe84:4223 dev=30 devname=port2-v18 flag=P scope=253 prefix=10 addr=fe80::209:fff:feb7:3c79 dev=29 devname=port2-v208 flag=P scope=253 prefix=10 addr=fe80::209:fff:feb7:3c79 FGT620B-2 (root) # diagnose ipv6 neighbor-cache list ifindex=2 ifname=port17 ff02::5 33:33:00:00:00:05 state=00000040 use=1089 confirm=10023854 update=10017854 ref=1 ifindex=2 ifname=port17 ff02::9 33:33:00:00:00:09 state=00000040 use=990 confirm=10310626 update=10304626 ref=0 ifindex=23 ifname=root :: 00:00:00:00:00:00 state=00000040 use=10308448 confirm=10314448 update=10308448 ref=5 ifindex=25 ifname=traffic :: 00:00:00:00:00:00 state=00000040 use=10308448 confirm=10314448 update=10308448 ref=6 ifindex=31 ifname=vsys_ha :: 00:00:00:00:00:00 state=00000040 use=10308078 confirm=10314078 update=10308078 ref=1 ifindex=27 ifname=vdl0 ff02::5 state=00000040 use=15792 confirm=21792 update=15792 ref=1 ifindex=28 ifname=vdl1 ff02::5 state=00000040 use=15792 confirm=21792 update=15792 ref=1 ifindex=33 ifname=vsys_fgfm :: 00:00:00:00:00:00 state=00000040 use=10307736 confirm=10313736 update=10307736 ref=1 ifindex=27 ifname=vdl0 ff02::9 state=00000040 use=19790 confirm=25790 update=19790 ref=0 ifindex=28 ifname=vdl1 ff02::9 state=00000040 use=19790 confirm=25790 update=19790 ref=0 ifindex=30 ifname=port2-v18 fec0::18:101 state=00000000 use=8301444 confirm=8307444 update=8301444 ref=3 ifindex=2 ifname=port17 fe80::209:fff:fe85:b7a9 00:09:0f:85:b7:a9 state=00000004 use=230025 confirm=230025 update=227734 ref=4 ifindex=27 ifname=vdl0 fe80::218:8bff:fe84:4133 state=00000040 use=548849 confirm=554849 update=548849 ref=6 ifindex=28 ifname=vdl1 fe80::218:8bff:fe84:4223 state=00000040 use=548852 confirm=554852 update=548852 ref=3 FGT620B-2 (root) # get router info6 ospf status Routing Process "OSPFv3 (*null*)" with ID 1.1.1.1 Process uptime is 33 minutes SPF schedule delay 5 secs, Hold time between SPFs 10 secs Minimum LSA interval 5 secs, Minimum LSA arrival 1 secs Number of incomming current DD exchange neighbors 0/5 Number of outgoing current DD exchange neighbors 0/5 Number of external LSA 3. Checksum Sum 0xBEAA Number of AS-Scoped Unknown LSA 0 Number of LSA originated 6 Number of LSA received 44 Number of areas in this router is 1 Area BACKBONE(0) Number of interfaces in this area is 2(2) SPF algorithm executed 4 times Number of LSA 10. Checksum Sum 0x4CE92 Number of Unknown LSA 0 FGT620B-2 (root) # get router info6 ospf interface vdl0 is up, line protocol is up Interface ID 27 IPv6 Prefixes fe80::218:8bff:fe84:4223/64 (Link-Local Address) OSPFv3 Process (*null*), Area 0.0.0.0, Instance ID 0 Router ID 1.1.1.1, Network Type POINTOPOINT, Cost: 100 Transmit Delay is 1 sec, State Point-To-Point, Priority 1 Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:04 Neighbor Count is 1, Adjacent neighbor count is 1 port2-v18 is up, line protocol is up Interface ID 30 IPv6 Prefixes fe80::209:fff:feb7:3c79/10 (Link-Local Address) fec0::18:16c/119 OSPFv3 Process (*null*), Area 0.0.0.0, Instance ID 0 Router ID 1.1.1.1, Network Type BROADCAST, Cost: 100 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 1.1.1.1 Interface Address fe80::209:fff:feb7:3c79 No backup designated router on this link Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 No Hellos (Passive interface) Neighbor Count is 0, Adjacent neighbor count is 0 FGT620B-2 (root) # get router info6 ospf topology OSPFv3 Process (*null*) OSPFv3 paths to Area (0.0.0.0) routers Router ID Bits Metric Next-Hop Interface 1.1.1.1 E -- 2.2.2.2 E 100 2.2.2.2 vdl0 3.3.3.3 EB 101 2.2.2.2 vdl0 FGT620B-2 (root) # get router info6 ospf neighbor OSPFv3 Process (*null*) Neighbor ID Pri State Dead Time Interface Instance ID 2.2.2.2 1 Full/ - 00:00:40 vdl0 0 FGT620B-2 (root) # get router info6 ospf neighbor 2.2.2.2 OSPFv3 Process (*null*) Neighbor 2.2.2.2, interface address fe80::218:8bff:fe84:4133 In the area 0.0.0.0 via interface vdl0 DR is 0.0.0.0 BDR is 0.0.0.0 Options is 0x000013 (-|R|-|-|E|V6) Dead timer due in 00:00:32 Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 FGT620B-2 (root) # get router info6 ospf route OSPFv3 Process (*null*) Codes: C - connected, D - Discard, O - OSPF, IA - OSPF inter area E1 - OSPF external type 1, E2 - OSPF external type 2 Destination Metric Next-hop IA fec0::/125 121 via fe80::218:8bff:fe84:4133, vdl0, Area 0.0.0.0 C fec0::18:0/119 100 directly connected, port2-v18, Area 0.0.0.0 IA fec0::146:0/119 111 via fe80::218:8bff:fe84:4133, vdl0, Area 0.0.0.0 O fec0::147:0/119 101 via fe80::218:8bff:fe84:4133, vdl0, Area 0.0.0.0 O fec1::208:0/119 200 via fe80::218:8bff:fe84:4133, vdl0, Area 0.0.0.0 O fec2::224:0/119 111 via fe80::218:8bff:fe84:4133, vdl0, Area 0.0.0.0 E2 fec2::226:0/119 111/10 via fe80::218:8bff:fe84:4133, vdl0 |
FGT620B-2 (traffic) # get router info6 routing-table IPv6 Routing Table Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - IS-IS, B - BGP Timers: Uptime O ::/0 [110/10] via fe80::218:8bff:fe84:4223, vdl1, 01:08:22 C ::1/128 via ::, traffic, 01:08:44 C fe80::/10 via ::, port2-v208, 01:08:44 via ::, port17, 01:08:44 C fe80::/64 via ::, vdl1, 01:08:44 O fec0::/125 [110/21] via fe80::209:fff:fe85:b7a9, port17, 01:04:14 O fec0::18:0/119 [110/200] via fe80::218:8bff:fe84:4223, vdl1, 01:08:23 O fec0::146:0/119 [110/11] via fe80::209:fff:fe85:b7a9, port17, 01:08:03 C fec0::147:0/119 via ::, port17, 01:08:44 C fec1::208:0/119 via ::, port2-v208, 01:08:44 O fec2::224:0/119 [110/11] via fe80::209:fff:fe85:b7a9, port17, 01:07:53 O fec2::226:0/119 [110/10] via fe80::209:fff:fe85:b7a9, port17, 01:07:52 O fed1::/126 [110/10] via fe80::218:8bff:fe84:4223, vdl1, 01:08:22 FGT620B-2 (traffic) # diagnose ipv6 address list dev=33 devname=vsys_fgfm flag=P scope=254 prefix=128 addr=::1 dev=31 devname=vsys_ha flag=P scope=254 prefix=128 addr=::1 dev=29 devname=port2-v208 flag=P scope=200 prefix=119 addr=fec1::208:16c dev=25 devname=traffic flag=P scope=254 prefix=128 addr=::1 dev=23 devname=root flag=P scope=254 prefix=128 addr=::1 dev=30 devname=port2-v18 flag=P scope=200 prefix=119 addr=fec0::18:16c dev=2 devname=port17 flag=P scope=253 prefix=10 addr=fe80::209:fff:feb7:3c88 dev=28 devname=vdl1 flag=P scope=253 prefix=64 addr=fe80::218:8bff:fe84:4133 dev=2 devname=port17 flag=P scope=200 prefix=119 addr=fec0::147:16c dev=27 devname=vdl0 flag=P scope=253 prefix=64 addr=fe80::218:8bff:fe84:4223 dev=30 devname=port2-v18 flag=P scope=253 prefix=10 addr=fe80::209:fff:feb7:3c79 dev=29 devname=port2-v208 flag=P scope=253 prefix=10 addr=fe80::209:fff:feb7:3c79 FGT620B-2 (traffic) # diagnose ipv6 neighbor-cache list ifindex=2 ifname=port17 ff02::5 33:33:00:00:00:05 state=00000040 use=749 confirm=10202614 update=10196614 ref=1 ifindex=2 ifname=port17 ff02::9 33:33:00:00:00:09 state=00000040 use=3450 confirm=10489386 update=10483386 ref=0 ifindex=23 ifname=root :: 00:00:00:00:00:00 state=00000040 use=10487208 confirm=10493208 update=10487208 ref=5 ifindex=25 ifname=traffic :: 00:00:00:00:00:00 state=00000040 use=10487208 confirm=10493208 update=10487208 ref=6 ifindex=31 ifname=vsys_ha :: 00:00:00:00:00:00 state=00000040 use=10486838 confirm=10492838 update=10486838 ref=1 ifindex=27 ifname=vdl0 ff02::5 state=00000040 use=194552 confirm=200552 update=194552 ref=1 ifindex=28 ifname=vdl1 ff02::5 state=00000040 use=194552 confirm=200552 update=194552 ref=1 ifindex=33 ifname=vsys_fgfm :: 00:00:00:00:00:00 state=00000040 use=10486496 confirm=10492496 update=10486496 ref=1 ifindex=27 ifname=vdl0 ff02::9 state=00000040 use=3450 confirm=9450 update=3450 ref=0 ifindex=28 ifname=vdl1 ff02::9 state=00000040 use=3450 confirm=9450 update=3450 ref=0 ifindex=30 ifname=port2-v18 fec0::18:101 state=00000000 use=8480204 confirm=8486204 update=8480204 ref=3 ifindex=2 ifname=port17 fe80::209:fff:fe85:b7a9 00:09:0f:85:b7:a9 state=00000004 use=408785 confirm=408785 update=406494 ref=4 ifindex=27 ifname=vdl0 fe80::218:8bff:fe84:4133 state=00000040 use=727609 confirm=733609 update=727609 ref=6 ifindex=28 ifname=vdl1 fe80::218:8bff:fe84:4223 state=00000040 use=727612 confirm=733612 update=727612 ref=3 FGT620B-2 (traffic) # get router info6 ospf status Routing Process "OSPFv3 (*null*)" with ID 2.2.2.2 Process uptime is 1 hour 8 minutes SPF schedule delay 5 secs, Hold time between SPFs 10 secs Minimum LSA interval 5 secs, Minimum LSA arrival 1 secs Number of incomming current DD exchange neighbors 0/5 Number of outgoing current DD exchange neighbors 0/5 Number of external LSA 3. Checksum Sum 0xB8AD Number of AS-Scoped Unknown LSA 0 Number of LSA originated 7 Number of LSA received 57 Number of areas in this router is 1 Area BACKBONE(0) Number of interfaces in this area is 3(3) SPF algorithm executed 5 times Number of LSA 10. Checksum Sum 0x4B89D Number of Unknown LSA 0 FGT620B-2 (traffic) # get router info6 ospf interface port17 is up, line protocol is up Interface ID 2 IPv6 Prefixes fe80::209:fff:feb7:3c88/10 (Link-Local Address) fec0::147:16c/119 OSPFv3 Process (*null*), Area 0.0.0.0, Instance ID 0 Router ID 2.2.2.2, Network Type BROADCAST, Cost: 1 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 2.2.2.2 Interface Address fe80::209:fff:feb7:3c88 Backup Designated Router (ID) 3.3.3.3 Interface Address fe80::209:fff:fe85:b7a9 Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:04 Neighbor Count is 1, Adjacent neighbor count is 1 vdl1 is up, line protocol is up Interface ID 28 IPv6 Prefixes fe80::218:8bff:fe84:4133/64 (Link-Local Address) OSPFv3 Process (*null*), Area 0.0.0.0, Instance ID 0 Router ID 2.2.2.2, Network Type POINTOPOINT, Cost: 100 Transmit Delay is 1 sec, State Point-To-Point, Priority 1 Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:04 Neighbor Count is 1, Adjacent neighbor count is 1 port2-v208 is up, line protocol is up Interface ID 29 IPv6 Prefixes fe80::209:fff:feb7:3c79/10 (Link-Local Address) fec1::208:16c/119 OSPFv3 Process (*null*), Area 0.0.0.0, Instance ID 0 Router ID 2.2.2.2, Network Type BROADCAST, Cost: 100 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 2.2.2.2 Interface Address fe80::209:fff:feb7:3c79 No backup designated router on this link Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 No Hellos (Passive interface) Neighbor Count is 0, Adjacent neighbor count is 0 FGT620B-2 (traffic) # get router info6 ospf topology OSPFv3 Process (*null*) OSPFv3 paths to Area (0.0.0.0) routers Router ID Bits Metric Next-Hop Interface 1.1.1.1 E 100 1.1.1.1 vdl1 2.2.2.2 E -- 3.3.3.3 EB 1 3.3.3.3 port17 FGT620B-2 (traffic) # get router info6 ospf neighbor OSPFv3 Process (*null*) Neighbor ID Pri State Dead Time Interface Instance ID 3.3.3.3 1 Full/Backup 00:00:30 port17 0 1.1.1.1 1 Full/ - 00:00:38 vdl1 0 FGT620B-2 (traffic) # get router info6 ospf neighbor 1.1.1.1 OSPFv3 Process (*null*) Neighbor 1.1.1.1, interface address fe80::218:8bff:fe84:4223 In the area 0.0.0.0 via interface vdl1 DR is 0.0.0.0 BDR is 0.0.0.0 Options is 0x000013 (-|R|-|-|E|V6) Dead timer due in 00:00:31 Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 FGT620B-2 (traffic) # get router info6 ospf neighbor 3.3.3.3 OSPFv3 Process (*null*) Neighbor 3.3.3.3, interface address fe80::209:fff:fe85:b7a9 In the area 0.0.0.0 via interface port17 DR is 2.2.2.2 BDR is 3.3.3.3 Options is 0x000013 (-|R|-|-|E|V6) Dead timer due in 00:00:38 Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 FGT620B-2 (traffic) # get router info6 ospf route OSPFv3 Process (*null*) Codes: C - connected, D - Discard, O - OSPF, IA - OSPF inter area E1 - OSPF external type 1, E2 - OSPF external type 2 Destination Metric Next-hop E2 ::/0 200/10 via fe80::218:8bff:fe84:4223, vdl1 IA fec0::/125 21 via fe80::209:fff:fe85:b7a9, port17, Area 0.0.0.0 O fec0::18:0/119 200 via fe80::218:8bff:fe84:4223, vdl1, Area 0.0.0.0 IA fec0::146:0/119 11 via fe80::209:fff:fe85:b7a9, port17, Area 0.0.0.0 C fec0::147:0/119 1 directly connected, port17, Area 0.0.0.0 C fec1::208:0/119 100 directly connected, port2-v208, Area 0.0.0.0 O fec2::224:0/119 11 via fe80::209:fff:fe85:b7a9, port17, Area 0.0.0.0 E2 fec2::226:0/119 11/10 via fe80::209:fff:fe85:b7a9, port17 E2 fed1::/126 200/10 via fe80::218:8bff:fe84:4223, vdl1 |
FGT300A-7 # get router info6 routing-table IPv6 Routing Table Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - IS-IS, B - BGP Timers: Uptime O ::/0 [110/10] via fe80::209:fff:feb7:3c88, port5, 01:12:06 C ::1/128 via ::, root, 01:12:37 C fe80::/10 via ::, port5, 01:12:37 via ::, port6, 01:12:37 via ::, port2, 01:12:37 O fec0::/125 [110/0] via ::1, root, 01:08:21 O fec0::/127 [110/20] via fe80::209:fff:fe85:3fc4, port6, 01:08:21 O fec0::4/127 [110/20] via fe80::209:fff:fe85:3fc4, port6, 01:08:21 O fec0::18:0/119 [110/210] via fe80::209:fff:feb7:3c88, port5, 01:12:06 C fec0::146:0/119 via ::, port6, 01:12:37 C fec0::147:0/119 via ::, port5, 01:12:37 O fec1::208:0/119 [110/110] via fe80::209:fff:feb7:3c88, port5, 01:12:06 C fec2::224:0/119 via ::, port2, 01:12:37 S fec2::226:0/119 [1/0] via fec2::224:1fe, port2, 01:12:32 O fed1::/126 [110/10] via fe80::209:fff:feb7:3c88, port5, 01:12:06 FGT300A-7 # diagnose ipv6 address list dev=6 devname=port6 flag=P scope=253 prefix=10 addr=fe80::209:fff:fe85:b7aa dev=3 devname=port2 flag=P scope=200 prefix=119 addr=fec2::224:72 dev=13 devname=vsys_fgfm flag=P scope=254 prefix=128 addr=::1 dev=11 devname=vsys_ha flag=P scope=254 prefix=128 addr=::1 dev=9 devname=root flag=P scope=254 prefix=128 addr=::1 dev=7 devname=port5 flag=P scope=253 prefix=10 addr=fe80::209:fff:fe85:b7a9 dev=6 devname=port6 flag=P scope=200 prefix=119 addr=fec0::146:72 dev=7 devname=port5 flag=P scope=200 prefix=119 addr=fec0::147:72 dev=3 devname=port2 flag=P scope=253 prefix=10 addr=fe80::209:fff:fe85:b7a6 FGT300A-7 # diagnose ipv6 neighbor-cache list ifindex=9 ifname=root :: 00:00:00:00:00:00 state=00000040 use=10327665 confirm=10333665 update=10327665 ref=7 ifindex=6 ifname=port6 ff02::5 33:33:00:00:00:05 state=00000040 use=665 confirm=10154401 update=10148401 ref=1 ifindex=11 ifname=vsys_ha :: 00:00:00:00:00:00 state=00000040 use=10327494 confirm=10333494 update=10327494 ref=1 ifindex=7 ifname=port5 ff02::5 33:33:00:00:00:05 state=00000040 use=766 confirm=10204077 update=10198077 ref=1 ifindex=13 ifname=vsys_fgfm :: 00:00:00:00:00:00 state=00000040 use=10327404 confirm=10333404 update=10327404 ref=1 ifindex=7 ifname=port5 ff02::9 33:33:00:00:00:09 state=00000040 use=37760 confirm=43760 update=37760 ref=0 ifindex=3 ifname=port2 fec2::224:1fe 00:19:b9:f8:e7:e9 state=00000004 use=550293 confirm=550293 update=545862 ref=1 ifindex=7 ifname=port5 fe80::209:fff:feb7:3c88 00:09:0f:b7:3c:88 state=00000004 use=434128 confirm=435928 update=433457 ref=4 ifindex=6 ifname=port6 fe80::209:fff:fe85:3fc4 00:09:0f:85:3f:c4 state=00000004 use=410166 confirm=411607 update=408361 ref=2 FGT300A-7 # get router info6 ospf status Routing Process "OSPFv3 (*null*)" with ID 3.3.3.3 Process uptime is 1 hour 12 minutes SPF schedule delay 5 secs, Hold time between SPFs 10 secs Minimum LSA interval 5 secs, Minimum LSA arrival 1 secs Number of incomming current DD exchange neighbors 0/5 Number of outgoing current DD exchange neighbors 0/5 Number of external LSA 3. Checksum Sum 0xB8AD Number of AS-Scoped Unknown LSA 0 Number of LSA originated 20 Number of LSA received 61 Number of areas in this router is 2 Area BACKBONE(0) Number of interfaces in this area is 2(2) SPF algorithm executed 3 times Number of LSA 10. Checksum Sum 0x4B89D Number of Unknown LSA 0 Area 0.0.0.1 Number of interfaces in this area is 1(1) SPF algorithm executed 5 times Number of LSA 11. Checksum Sum 0x52B66 Number of Unknown LSA 0 FGT300A-7 # get router info6 ospf interface port2 is up, line protocol is up Interface ID 3 IPv6 Prefixes fe80::209:fff:fe85:b7a6/10 (Link-Local Address) fec2::224:72/119 OSPFv3 Process (*null*), Area 0.0.0.0, Instance ID 0 Router ID 3.3.3.3, Network Type BROADCAST, Cost: 10 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 3.3.3.3 Interface Address fe80::209:fff:fe85:b7a6 No backup designated router on this link Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 No Hellos (Passive interface) Neighbor Count is 0, Adjacent neighbor count is 0 port6 is up, line protocol is up Interface ID 6 IPv6 Prefixes fe80::209:fff:fe85:b7aa/10 (Link-Local Address) fec0::146:72/119 OSPFv3 Process (*null*), Area 0.0.0.1, Instance ID 0 Router ID 3.3.3.3, Network Type BROADCAST, Cost: 10 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 3.3.3.3 Interface Address fe80::209:fff:fe85:b7aa Backup Designated Router (ID) 4.4.4.4 Interface Address fe80::209:fff:fe85:3fc4 Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:07 Neighbor Count is 1, Adjacent neighbor count is 1 port5 is up, line protocol is up Interface ID 7 IPv6 Prefixes fe80::209:fff:fe85:b7a9/10 (Link-Local Address) fec0::147:72/119 OSPFv3 Process (*null*), Area 0.0.0.0, Instance ID 0 Router ID 3.3.3.3, Network Type BROADCAST, Cost: 10 Transmit Delay is 1 sec, State Backup, Priority 1 Designated Router (ID) 2.2.2.2 Interface Address fe80::209:fff:feb7:3c88 Backup Designated Router (ID) 3.3.3.3 Interface Address fe80::209:fff:fe85:b7a9 Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:06 Neighbor Count is 1, Adjacent neighbor count is 1 FGT300A-7 # get router info6 ospf topology OSPFv3 Process (*null*) OSPFv3 paths to Area (0.0.0.0) routers Router ID Bits Metric Next-Hop Interface 1.1.1.1 E 110 2.2.2.2 port5 2.2.2.2 E 10 2.2.2.2 port5 3.3.3.3 EB -- OSPFv3 paths to Area (0.0.0.1) routers Router ID Bits Metric Next-Hop Interface 3.3.3.3 EB -- 4.4.4.4 10 4.4.4.4 port6 FGT300A-7 # get router info6 ospf neighbor OSPFv3 Process (*null*) Neighbor ID Pri State Dead Time Interface Instance ID 4.4.4.4 1 Full/Backup 00:00:31 port6 0 2.2.2.2 1 Full/DR 00:00:30 port5 0 FGT300A-7 # get router info6 ospf neighbor 2.2.2.2 OSPFv3 Process (*null*) Neighbor 2.2.2.2, interface address fe80::209:fff:feb7:3c88 In the area 0.0.0.0 via interface port5 DR is 2.2.2.2 BDR is 3.3.3.3 Options is 0x000013 (-|R|-|-|E|V6) Dead timer due in 00:00:32 Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 FGT300A-7 # get router info6 ospf neighbor 4.4.4.4 OSPFv3 Process (*null*) Neighbor 4.4.4.4, interface address fe80::209:fff:fe85:3fc4 In the area 0.0.0.1 via interface port6 DR is 3.3.3.3 BDR is 4.4.4.4 Options is 0x000013 (-|R|-|-|E|V6) Dead timer due in 00:00:37 Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 |
FGT300A-2 # get router info6 routing-table IPv6 Routing Table Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - IS-IS, B - BGP Timers: Uptime O ::/0 [110/10] via fe80::209:fff:fe85:b7aa, port2, 01:11:49 C ::1/128 via ::, root, 23:41:09 C fe80::/10 via ::, port5, 23:41:09 via ::, port6, 23:41:09 via ::, port2, 23:41:09 C fec0::/127 via ::, port5, 10:12:03 C fec0::4/127 via ::, port6, 10:11:33 O fec0::18:0/119 [110/220] via fe80::209:fff:fe85:b7aa, port2, 01:11:49 C fec0::146:0/119 via ::, port2, 23:41:09 O fec0::147:0/119 [110/20] via fe80::209:fff:fe85:b7aa, port2, 01:11:49 O fec1::208:0/119 [110/120] via fe80::209:fff:fe85:b7aa, port2, 01:11:49 O fec2::224:0/119 [110/20] via fe80::209:fff:fe85:b7aa, port2, 01:11:49 O fec2::226:0/119 [110/10] via fe80::209:fff:fe85:b7aa, port2, 01:11:49 O fed1::/126 [110/10] via fe80::209:fff:fe85:b7aa, port2, 01:11:49 FGT300A-2 # diagnose ipv6 address list dev=7 devname=port5 flag=P scope=200 prefix=127 addr=fec0::1 dev=13 devname=vsys_fgfm flag=P scope=254 prefix=128 addr=::1 dev=11 devname=vsys_ha flag=P scope=254 prefix=128 addr=::1 dev=9 devname=root flag=P scope=254 prefix=128 addr=::1 dev=6 devname=port6 flag=P scope=253 prefix=10 addr=fe80::209:fff:fe85:3fc8 dev=6 devname=port6 flag=P scope=200 prefix=127 addr=fec0::5 dev=3 devname=port2 flag=P scope=200 prefix=119 addr=fec0::146:136 dev=3 devname=port2 flag=P scope=253 prefix=10 addr=fe80::209:fff:fe85:3fc4 dev=7 devname=port5 flag=P scope=253 prefix=10 addr=fe80::209:fff:fe85:3fc7 FGT300A-2 # diagnose ipv6 neighbor-cache list ifindex=3 ifname=port2 ff02::5 33:33:00:00:00:05 state=00000040 use=257 confirm=10129952 update=10123952 ref=1 ifindex=9 ifname=root :: 00:00:00:00:00:00 state=00000040 use=3910605 confirm=3910605 update=10148483 ref=7 ifindex=6 ifname=port6 ff02::5 33:33:00:00:00:05 state=00000040 use=1057 confirm=441503 update=435503 ref=1 ifindex=11 ifname=vsys_ha :: 00:00:00:00:00:00 state=00000040 use=10148192 confirm=10154192 update=10148192 ref=1 ifindex=7 ifname=port5 ff02::5 33:33:00:00:00:05 state=00000040 use=157 confirm=441503 update=435503 ref=1 ifindex=13 ifname=vsys_fgfm :: 00:00:00:00:00:00 state=00000040 use=10147439 confirm=10153439 update=10147439 ref=1 ifindex=3 ifname=port2 fe80::209:fff:fe85:b7aa 00:09:0f:85:b7:aa state=00000004 use=433215 confirm=433215 update=430599 ref=7 FGT300A-2 # get router info6 ospf status Routing Process "OSPFv3 (*null*)" with ID 4.4.4.4 Process uptime is 1 hour 12 minutes SPF schedule delay 5 secs, Hold time between SPFs 10 secs Minimum LSA interval 5 secs, Minimum LSA arrival 1 secs Number of incomming current DD exchange neighbors 0/5 Number of outgoing current DD exchange neighbors 0/5 Number of external LSA 3. Checksum Sum 0xB8AD Number of AS-Scoped Unknown LSA 0 Number of LSA originated 54 Number of LSA received 808 Number of areas in this router is 1 Area 0.0.0.1 Number of interfaces in this area is 3(3) SPF algorithm executed 43 times Number of LSA 11. Checksum Sum 0x52B66 Number of Unknown LSA 0 FGT300A-2 # get router info6 ospf interface port2 is up, line protocol is up Interface ID 3 IPv6 Prefixes fe80::209:fff:fe85:3fc4/10 (Link-Local Address) fec0::146:136/119 OSPFv3 Process (*null*), Area 0.0.0.1, Instance ID 0 Router ID 4.4.4.4, Network Type BROADCAST, Cost: 10 Transmit Delay is 1 sec, State Backup, Priority 1 Designated Router (ID) 3.3.3.3 Interface Address fe80::209:fff:fe85:b7aa Backup Designated Router (ID) 4.4.4.4 Interface Address fe80::209:fff:fe85:3fc4 Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:00 Neighbor Count is 1, Adjacent neighbor count is 1 port6 is up, line protocol is up Interface ID 6 IPv6 Prefixes fe80::209:fff:fe85:3fc8/10 (Link-Local Address) fec0::5/127 OSPFv3 Process (*null*), Area 0.0.0.1, Instance ID 0 Router ID 4.4.4.4, Network Type BROADCAST, Cost: 10 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 4.4.4.4 Interface Address fe80::209:fff:fe85:3fc8 No backup designated router on this link Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:02 Neighbor Count is 0, Adjacent neighbor count is 0 port5 is up, line protocol is up Interface ID 7 IPv6 Prefixes fe80::209:fff:fe85:3fc7/10 (Link-Local Address) fec0::1/127 OSPFv3 Process (*null*), Area 0.0.0.1, Instance ID 0 Router ID 4.4.4.4, Network Type BROADCAST, Cost: 10 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 4.4.4.4 Interface Address fe80::209:fff:fe85:3fc7 No backup designated router on this link Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:02 Neighbor Count is 0, Adjacent neighbor count is 0 FGT300A-2 # get router info6 ospf topology OSPFv3 Process (*null*) OSPFv3 paths to Area (0.0.0.1) routers Router ID Bits Metric Next-Hop Interface 3.3.3.3 EB 10 3.3.3.3 port2 4.4.4.4 -- FGT300A-2 # get router info6 ospf neighbor OSPFv3 Process (*null*) Neighbor ID Pri State Dead Time Interface Instance ID 3.3.3.3 1 Full/DR 00:00:35 port2 0 FGT300A-2 # get router info6 ospf neighbor 3.3.3.3 OSPFv3 Process (*null*) Neighbor 3.3.3.3, interface address fe80::209:fff:fe85:b7aa In the area 0.0.0.1 via interface port2 DR is 3.3.3.3 BDR is 4.4.4.4 Options is 0x000013 (-|R|-|-|E|V6) Dead timer due in 00:00:37 Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 |
Troubleshooting
FGT620B-2 (root) # get router info6 ospf database ? router show ospf database router-lsa network show ospf database network-lsa inter-prefix show ospf database inter-prefix-lsa inter-router show ospf database inter-router-lsa external show ospf database external-lsa link show ospf database link-lsa intra-prefix show ospf database intra-prefix-lsa |
FGT300A-7 # diagnose debug enable FGT300A-7 # diagnose ipv6 router ospf level info FGT300A-7 # diagnose ipv6 router ospf all enable OSPFv3: IFSM[port5]: Hello timer expire OSPFv3: SEND[Hello]: src(fe80::209:fff:fe85:b7a9) -> dst(ff02::5) on port5 OSPFv3: OSPFv3 Header OSPFv3: Version 3 OSPFv3: Type 1 (Hello) OSPFv3: Packet length 40 OSPFv3: Router ID 3.3.3.3 OSPFv3: Area ID 0.0.0.0 OSPFv3: Checksum 0x0000 OSPFv3: Instance ID 0 OSPFv3: OSPFv3 Hello OSPFv3: Interface ID 7 OSPFv3: RtrPriority 1 OSPFv3: Options 0x000013 (-|R|-|-|E|V6) OSPFv3: HelloInterval 10 OSPFv3: RtrDeadInterval 40 OSPFv3: DRouter 2.2.2.2 OSPFv3: BDRouter 3.3.3.3 OSPFv3: # Neighbors 1 OSPFv3: Neighbor 2.2.2.2 aOSPFv3: IFSM[port6]: Hello timer expire OSPFv3: SEND[Hello]: src(fe80::209:fff:fe85:b7aa) -> dst(ff02::5) on port6 OSPFv3: OSPFv3 Header OSPFv3: Version 3 OSPFv3: Type 1 (Hello) OSPFv3: Packet length 40 OSPFv3: Router ID 3.3.3.3 OSPFv3: Area ID 0.0.0.1 OSPFv3: Checksum 0x0000 OSPFv3: Instance ID 0 OSPFv3: OSPFv3 Hello OSPFv3: Interface ID 6 OSPFv3: RtrPriority 1 OSPFv3: Options 0x000013 (-|R|-|-|E|V6) OSPFv3: HelloInterval 10 OSPFv3: RtrDeadInterval 40 OSPFv3: DRouter 3.3.3.3 OSPFv3: BDRouter 4.4.4.4 OSPFv3: # Neighbors 1 OSPFv3: Neighbor 4.4.4.4 OSPFv3: IFSM[port2]: Hello timer expire OSPFv3: RECV[Hello]: src(fe80::209:fff:feb7:3c88) -> dst(ff02::5) on port5 OSPFv3: OSPFv3 Header OSPFv3: Version 3 OSPFv3: Type 1 (Hello) OSPFv3: Packet length 40 OSPFv3: Router ID 2.2.2.2 OSPFv3: Area ID 0.0.0.0 OSPFv3: Checksum 0x9c29 OSPFv3: Instance ID 0 OSPFv3: OSPFv3 Hello OSPFv3: Interface ID 2 OSPFv3: RtrPriority 1 OSPFv3: Options 0x000013 (-|R|-|-|E|V6) OSPFv3: HelloInterval 10 OSPFv3: RtrDeadInterval 40 OSPFv3: DRouter 2.2.2.2 OSPFv3: BDRouter 3.3.3.3 OSPFv3: # Neighbors 1 OSPFv3: Neighbor 3.3.3.3 OSPFv3: NFSM[2.2.2.2-00000002]: Full (HelloReceived) OSPFv3: NFSM[2.2.2.2-00000002]: nfsm_ignore called OSPFv3: NFSM[2.2.2.2-00000002]: Full (2-WayReceived) OSPFv3: RECV[Hello]: Neighbor(2.2.2.2) declare 2.2.2.2 as DR, 3.3.3.3 as Backup OSPFv3: RECV[Hello]: src(fe80::209:fff:fe85:3fc4) -> dst(ff02::5) on port6 OSPFv3: OSPFv3 Header OSPFv3: Version 3 OSPFv3: Type 1 (Hello) OSPFv3: Packet length 40 OSPFv3: Router ID 4.4.4.4 OSPFv3: Area ID 0.0.0.1 OSPFv3: Checksum 0x9115 OSPFv3: Instance ID 0 OSPFv3: OSPFv3 Hello OSPFv3: Interface ID 3 OSPFv3: RtrPriority 1 OSPFv3: Options 0x000013 (-|R|-|-|E|V6) OSPFv3: HelloInterval 10 OSPFv3: RtrDeadInterval 40 OSPFv3: DRouter 3.3.3.3 OSPFv3: BDRouter 4.4.4.4 OSPFv3: # Neighbors 1 OSPFv3: Neighbor 3.3.3.3 OSPFv3: NFSM[4.4.4.4-00000003]: Full (HelloReceived) OSPFv3: NFSM[4.4.4.4-00000003]: nfsm_ignore called OSPFv3: NFSM[4.4.4.4-00000003]: Full (2-WayReceived) OSPFv3: RECV[Hello]: Neighbor(4.4.4.4) declare 3.3.3.3 as DR, 4.4.4.4 as Backup OSPFv3: IFSM[port5]: Hello timer expire OSPFv3: SEND[Hello]: src(fe80::209:fff:fe85:b7a9) -> dst(ff02::5) on port5 OSPFv3: OSPFv3 Header OSPFv3: Version 3 OSPFv3: Type 1 (Hello) OSPFv3: Packet length 40 OSPFv3: Router ID 3.3.3.3 OSPFv3: Area ID 0.0.0.0 OSPFv3: Checksum 0x0000 OSPFv3: Instance ID 0 OSPFv3: OSPFv3 Hello OSPFv3: Interface ID 7 OSPFv3: RtrPriority 1 OSPFv3: Options 0x000013 (-|R|-|-|E|V6) OSPFv3: HelloInterval 10 OSPFv3: RtrDeadInterval 40 OSPFv3: DRouter 2.2.2.2 OSPFv3: BDRouter 3.3.3.3 OSPFv3: # Neighbors 1 OSPFv3: Neighbor 2.2.2.2 OSPFv3: IFSM[port2]: Hello timer expire OSPFv3: IFSM[port6]: Hello timer expire OSPFv3: SEND[Hello]: src(fe80::209:fff:fe85:b7aa) -> dst(ff02::5) on port6 OSPFv3: OSPFv3 Header OSPFv3: Version 3 OSPFv3: Type 1 (Hello) OSPFv3: Packet length 40 OSPFv3: Router ID 3.3.3.3 OSPFv3: Area ID 0.0.0.1 OSPFv3: Checksum 0x0000 OSPFv3: Instance ID 0 OSPFv3: OSPFv3 Hello OSPFv3: Interface ID 6 OSPFv3: RtrPriority 1 OSPFv3: Options 0x000013 (-|R|-|-|E|V6) OSPFv3: HelloInterval 10 OSPFv3: RtrDeadInterval 40 OSPFv3: DRouter 3.3.3.3 OSPFv3: BDRouter 4.4.4.4 OSPFv3: # Neighbors 1 OSPFv3: Neighbor 4.4.4.4 OSPFv3: RECV[Hello]: src(fe80::209:fff:feb7:3c88) -> dst(ff02::5) on port5 OSPFv3: OSPFv3 Header OSPFv3: Version 3 OSPFv3: Type 1 (Hello) OSPFv3: Packet length 40 OSPFv3: Router ID 2.2.2.2 OSPFv3: Area ID 0.0.0.0 OSPFv3: Checksum 0x9c29 OSPFv3: Instance ID 0 OSPFv3: OSPFv3 Hello OSPFv3: Interface ID 2 OSPFv3: RtrPriority 1 OSPFv3: Options 0x000013 (-|R|-|-|E|V6) OSPFv3: HelloInterval 10 OSPFv3: RtrDeadInterval 40 OSPFv3: DRouter 2.2.2.2 OSPFv3: BDRouter 3.3.3.3 OSPFv3: # Neighbors 1 OSPFv3: Neighbor 3.3.3.3 OSPFv3: NFSM[2.2.2.2-00000002]: Full (HelloReceived) OSPFv3: NFSM[2.2.2.2-00000002]: nfsm_ignore called OSPFv3: NFSM[2.2.2.2-00000002]: Full (2-WayReceived) OSPFv3: RECV[Hello]: Neighbor(2.2.2.2) declare 2.2.2.2 as DR, 3.3.3.3 as Backup OSPFv3: RECV[Hello]: src(fe80::209:fff:fe85:3fc4) -> dst(ff02::5) on port6 .../... |
Related Articles
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.