Fortinet notes: Difference between revisions

From Federal Burro of Information
Jump to navigationJump to search
Line 31: Line 31:


<pre>
<pre>
    edit "internal"
        set vdom "root"
        set ip 192.168.1.99 255.255.255.0
        set allowaccess ping https ssh snmp
        set type physical
            config ipv6
                set ip6-address 2001:470:1d:907::99/64
                set ip6-allowaccess ping https ssh
                set ip6-other-flag enable
                    config ip6-prefix-list
                        edit 2001:470:1d:907::/64
                            set autonomous-flag enable
                            set onlink-flag enable
                            set preferred-life-time 3600
                        next
                    end
                set ip6-send-adv enable
            end
    next
    edit "HE"
        set vdom "root"
        set ip 0.0.0.0 255.255.255.255
        set type tunnel
            config ipv6
                set ip6-allowaccess ping
            end
        set interface "wan1"
    next
config system sit-tunnel
config system sit-tunnel
     edit "HE"
     edit "HE"
Line 45: Line 75:
end
end


config system interface
    edit port3
            config ipv6
                set ip6-address 2001:470:489e::1/64
                set ip6-allowaccess ping
                set ip6-manage-flag enable
                set ip6-other-flag enable
                    config ip6-prefix-list
                        edit 2001:470:489e::/64
                            set autonomous-flag enable
                            set onlink-flag enable
                            set preferred-life-time 3600
                        next
                    end
                set ip6-send-adv enable
          end
    next
end
</pre>
</pre>

Revision as of 04:24, 16 October 2012

ipv6 setup: http://www.sixxs.net/wiki/Fortigate

support: http://docs.fortinet.com/fgt/archives/3.0/techdocs/IPv6_support_Tech_Note_01-30007-82573-20081003.pdf

Online help

http://docs.fortinet.com/fdb/html/fdb-user-guide/index.html?page=source%2Freferences%2Fr_cli_admin_config_sys.html

Basic commands ( CLI )

show int

becomes:

get system interface

XML API

http://docs.fortinet.com/fa/fortianalyzer-40-mr3-xmlapi.pdf

where are the mibs?

http://kb.fortinet.com/kb/microsites/microsite.do?cmd=displayKC&externalId=FD30891

http://docs.fortinet.com/fmgr/fmgr-admin/index.html#page/FMG-Admin-Guide/600_System_Settings.07.60.html

HE IPv6 config

Note: provider (Teksavvy) has my static IP I take my queue from what the interface is configured with.

    edit "internal"
        set vdom "root"
        set ip 192.168.1.99 255.255.255.0
        set allowaccess ping https ssh snmp
        set type physical
            config ipv6
                set ip6-address 2001:470:1d:907::99/64
                set ip6-allowaccess ping https ssh
                set ip6-other-flag enable
                    config ip6-prefix-list
                        edit 2001:470:1d:907::/64
                            set autonomous-flag enable
                            set onlink-flag enable
                            set preferred-life-time 3600
                        next
                    end
                set ip6-send-adv enable
            end
    next
    edit "HE"
        set vdom "root"
        set ip 0.0.0.0 255.255.255.255
        set type tunnel
            config ipv6
                set ip6-allowaccess ping
            end
        set interface "wan1"
    next


config system sit-tunnel
    edit "HE"
        set destination 216.66.38.58
        set ip6 2001:470:1c:907::2/64
		set interface wan1
    next
end

config router static6
    edit 1
        set device "HE"
    next
end