FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Kush_Patel
Staff
Staff
Article Id 284490
Description

By default, when a new IPv6 SLA is configured, it will only allow PING as a protocol, as shown in the following image:

 

pingoptionipv6.PNG

Scope FortiGate 7.0 and above.
Solution

After configuring IPv6 SLA with Ping Protocol, other Protocol options will only be available through the CLI as shown below:

 

config system sdwan

config health-check

edit "Oracle Server"

set protocol

 

ping           Use PING to test the link with the server.

udp-echo       Use UDP echo to test the link with the server.

dns            Use DNS query to test the link with the server.

tcp-connect    Use a full TCP connection to test the link with the server.

ftp            Use FTP to test the link with the server.

 

set protocol dns

end

 

Once the changes made through the CLI have been saved, DNS as Protocol will be visible in the GUI as well:

 

DNSipv6.PNG

 

Related article:

Technical Tip: SD-WAN configuration for IPv6.

Contributors