Fortinet notes: Difference between revisions

From Federal Burro of Information
Jump to navigationJump to search
Line 43: Line 43:
         set device "HE"
         set device "HE"
     next
     next
end
config system interface
    edit port3
            config ipv6
                set ip6-address 2001:470:489e::1/64
                set ip6-allowaccess ping
                set ip6-manage-flag enable
                set ip6-other-flag enable
                    config ip6-prefix-list
                        edit 2001:470:489e::/64
                            set autonomous-flag enable
                            set onlink-flag enable
                            set preferred-life-time 3600
                        next
                    end
                set ip6-send-adv enable
          end
    next
end
end
</pre>
</pre>

Revision as of 04:15, 16 October 2012

ipv6 setup: http://www.sixxs.net/wiki/Fortigate

support: http://docs.fortinet.com/fgt/archives/3.0/techdocs/IPv6_support_Tech_Note_01-30007-82573-20081003.pdf

Online help

http://docs.fortinet.com/fdb/html/fdb-user-guide/index.html?page=source%2Freferences%2Fr_cli_admin_config_sys.html

Basic commands ( CLI )

show int

becomes:

get system interface

XML API

http://docs.fortinet.com/fa/fortianalyzer-40-mr3-xmlapi.pdf

where are the mibs?

http://kb.fortinet.com/kb/microsites/microsite.do?cmd=displayKC&externalId=FD30891

http://docs.fortinet.com/fmgr/fmgr-admin/index.html#page/FMG-Admin-Guide/600_System_Settings.07.60.html

HE IPv6 config

Note: provider (Teksavvy) has my static IP I take my queue from what the interface is configured with.

config system sit-tunnel
    edit "HE"
        set destination 216.66.38.58
        set ip6 2001:470:1c:907::2/64
		set interface wan1
    next
end

config router static6
    edit 1
        set device "HE"
    next
end

config system interface
     edit port3
            config ipv6
                set ip6-address 2001:470:489e::1/64
                set ip6-allowaccess ping
                set ip6-manage-flag enable
                set ip6-other-flag enable
                    config ip6-prefix-list
                        edit 2001:470:489e::/64
                            set autonomous-flag enable
                            set onlink-flag enable
                            set preferred-life-time 3600
                        next
                    end
                set ip6-send-adv enable
          end
     next
end