Wednesday, September 9, 2015

ipv6 cleanup fortigate

Here's some  general ideals for when changing your ipv6 address on a fortigate. It make sense to clear all address and flush neighbor-cache if you make any changes. This will release and start fresh without any system reboots.

To clear  these items, please use the following diag commands;

The following  commands are good for monitoring resources usage;

Points to under take with regards to ipv6;

  • ipv6 address changes are simple to make
  • a interface can have multiple global ipv6 unicast address 
  • but only one link-only fe80::/10 address
  • it common to change any ipv6 address with no issues
  • use the above suggested commands for any diagnostics and for monitoring

Ken Felix
NSE ( Network Security Expert) and Route/Switching Engineer.
kfelix  -----a----t---- socpuppets ---dot---com

    ^     ^
=(  *  * )=
      /  \

No comments:

Post a Comment