|
Before FortiOS v7.6.2 and lower versions, HA Reserved management port was possible to configure only IPv4 for the gateway, but not IPv6. In FortiOS v7.6.3, a new option that allows the administrator to add a gateway IPv6 for HA Reserved Management port is included.
Example of HA config, where port 7 is used as the HA Reserved management port. This interface has IPv4 and IPv6 addresses.
config system interface
edit "port7"
set ip 192.168.100.1 255.255.255.0
set allowaccess ping ssh snmp https
set type physical
set alias "HA_MGMT_INT"
set snmp-index 7
config ipv6
set ip6-address 2001:db8:abcd:12::1/120
set ip6-allowaccess ping https snmp http
end
next
end
FortiGate HA configuration:
config system ha
set group-id 199
set group-name "HA_Cluster1"
set mode a-p
set password ENC xxxxxx
set hbdev "port10" 10
set ha-mgmt-status enable
config ha-mgmt-interfaces
edit 1
set interface "port7"
set gateway 192.168.100.254
set gateway6 2001:db8:abcd:12::2
next
end
set override disable
end
The newly introduced command:
set gateway6
<IPv6 addr> ip6 xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
|
