FORTIGATE IPV6_PD

In the fortigate it so easy to enable IPV6-DHCP-PD for ISP that advertise dhcp6 and delegation of prefixes.

Here's a simpel config where port1 is your ISP uplink and port2 is one our local-lan for ipv6



config system interface 
edit port1  
    config ipv6
         set ip6-mode dhcp
         set dhcp6-prefix-delegation enable
         set dhcp6-prefix-hint ::/56
         set dhcp6-prefix-hint-vlt 0
         set dhcp6-prefix-hint-plt 0
     next 
 end
end

config system interface
    edit "port2"
        config ipv6
            set ip6-mode delegated
            set ip6-allowaccess ping https ssh
            set dhcp6-prefix-delegation enable
            set ip6-send-adv enable
            set ip6-manage-flag enable
            set ip6-other-flag enable
            set ip6-upstream-interface "wan2"
            set ip6-subnet ::/64
            config ip6-delegated-prefix-list
                edit 1
                    set upstream-interface "port1"
                    set autonomous-flag enable
                    set onlink-flag enable
                    set subnet ::/64
                next
            end
        end


You can check for local route and ipv6 reachability from the cli,


 get router info6 routing-table
 execute ping  2620:119:35::35
 execute tracert6 2620:119:35::35

NSE ( network security expert) and Route/Switching Engineer

kfelix  -----a----t---- socpuppets ---dot---com

     ^      ^

=(  @  @ )=

         o

        /  \