Fortigate 60D: IPv6

INTERNET TOEGANG Router/Modem en server instellingen
, ,
2

Het is gelukt! Qua IPv6 zijn we nu ook overgestapt. Het is uiteindelijk vooral gelukt met de configuratie zoals 'ie hier is terug te vinden: http://networkdynamics.nl/?p=1

Mijn (relevante) configuratie is nu als volgt:

config system interface
    edit "wan2"
        set vdom "root"
        set ip 192.168.1.10 255.255.255.0
        set allowaccess ping
        set type physical
        set alias "draytek"
        set lldp-transmission disable
        set role wan
        set snmp-index 3
        set mtu-override enable
        set mtu 1514
    next
end

config system interface
    edit "freedom-inet"
        set vdom "root"
        set allowaccess ping
        set estimated-upstream-bandwidth 34000
        set estimated-downstream-bandwidth 112000
        set role wan
        set snmp-index 8
        set mtu-override enable
        set mtu 1506
        set interface "wan2"
        set vlanid 6
    next
end

config system interface
    edit "pppoe1"
        set vdom "root"
        set mode pppoe
        set allowaccess ping
        set type tunnel
        set estimated-upstream-bandwidth 34000
        set estimated-downstream-bandwidth 112000
        set snmp-index 9
        config ipv6
            set ip6-mode dhcp
            set ip6-allowaccess ping
            set dhcp6-prefix-delegation enable
        end
        set interface "freedom-inet"
    next
end

config system interface
    edit "internal"
        set vdom "root"
        set ip x.x.x.x 255.255.255.0
        set allowaccess ping https ssh snmp http
        set type hard-switch
        set role lan
        set snmp-index 6
        config ipv6
            set ip6-mode delegated
            set ip6-allowaccess ping
            set dhcp6-prefix-delegation enable
            set ip6-send-adv enable
            set ip6-manage-flag enable
            set ip6-other-flag enable
            set ip6-upstream-interface "pppoe1"
            set ip6-subnet aaaa:bbbb:cccc:dddd::/64
            config ip6-delegated-prefix-list
                edit 1
                    set upstream-interface "pppoe1"
                    set autonomous-flag enable
                    set subnet aaaa:bbbb:cccc:dddd::/64
                next
            end
        end
        set mtu-override enable
    next
end

config system pppoe-interface
    edit "pppoe1"
        set ipv6 enable
        set device "freedom-inet"
    next
end

config router static6
    edit 1
        set device "pppoe1"
    next
end

config system dhcp6 server
    edit 1
        set rapid-commit enable
        set dns-service default
        set subnet aaaa:bbbb:cccc:dddd::/64
        set interface "internal"
        set upstream-interface "pppoe1"
        set ip-mode delegated
    next
end

aaaa:bbbb:cccc:dddd::/64 bij de set subnet parameter zijn de eerste drie digits van het ipv6 subnet dat door Freedom is toegewezen (de /48), plus een vierde digit (dddd) dat ik gebruik om mijn lokale LAN netwerk aan te duiden.

Problem solved!

1 like