FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
cpagare
Staff
Staff
Article Id 201883
Description The article describes how to configure a downstream FortiGate to obtain the IPv6 prefix and DNS from an upstream DHCPv6 server through FortiGate GUI.
Scope  
Solution

In this scenario, a DHCPv6 server is connected to FortiGate A via an upstream interface.

 

In this example, port1 is the upstream interface.

FortiGate A is connected to FortiGate B via a downstream interface (port2 in this example).

 

To configure a downstream FortiGate to obtain the IPv6 prefix and DNS from an upstream DHCPv6 server:

 

1) Configure the upstream interface:

 

- On FortiGate A, go to Network -> Interfaces.

- Edit port1.

- For IPv6 addressing mode, select DHCP.

- Enable DHCPv6 prefix delegation.

- Select 'OK'.

 

cpagare_0-1640432367769.png

 

2) Configure the downstream interface:

 

- On FortiGate A, edit port2.

- Enable DHCPv6 Server.

- Set DNS service and IP mode to Delegated.

- Enable a Stateful server.

- From the Upstream interface dropdown list, select port1.

- Select 'OK'.

 

cpagare_1-1640432580116.png

 

3) Configure the FortiGate B interface:

 

- On FortiGate B, go to Network -> Interfaces.

- Edit the desired interface.

- Set IPv6 addressing mode to DHCP. FortiGate B obtains the IPv6 prefix and DNS from the DHCPv6 server.

 

cpagare_2-1640432662939.png

 

Related document:

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/754259/gui-support-for-configuring-i...

Contributors