VPN SSL double stack IPV4 and IPV6

[Meni]

Hi i have a problem to ativate double stack for  vpn ssl

config vpn ssl settings
    set dual-stack-mode enable
end

Response in cli mode

set dual-stack-mode enable
To enable dual-stack-mode, all SSL-VPN policies must be configured with IPv4 and IPv6.
node_check_object fail! for dual-stack-mode enable 

I have only one vpn policie. do you have an idea ?

Regards

[Meni · Accepted solution]

where do you pu this argument ?

[dbu]

config vpn ssl web portal
edit "testportal1"
set prefer-ipv6-dns enable/disable

next
end

[edson2024 · Accepted solution]

Hello, when dual-stack is configured on the fortigate and you connect with Forticlient 7.0.7 with "Enable Dual-stack IPv4/IPv6 address". Do you get ONLY an IPv6 address?. Also, once connected. In example, if you have an SSLVPN zone to Internet zone Firewall policy. How does that work? For IPv4 you would need NAT, but for IPv6. You would not need NAT.  Can you have one policy for IPv4 (NAT'ing) and different policy for IPv6 not NAT'ing?