Fortinet white logo
Fortinet white logo

CLI Reference

config ipv6

config ipv6

Description: Configure the IPv6 interface settings.

config system interface
  edit <name>
    config ipv6
      set status [enable | disable]
      set ip6-mode [static | dhcp | pppoe | delegated]
      set autoconf [enable | disable]
      set ip6-send-adv [enable | disable]
      set ip6-manage-flag [enable | disable]
      set ip6-other-flag [enable | disable]
      set ip6-max-interval <4-1800>
      set ip6-min-interval <3-1350>
      set ip6-address {ipv6-address}
      set ip6-adv-rio [enable | disable]
      set ip6-route-pref [low | medium | high]
      set ip6-gw {ipv6-address}
      set ip6-upstream-interface [option1 | ...]
      set ip6-allowaccess [http | https | ping | snmp | ssh]
      set distance {number}
      config ip6-prefix-list
        edit <name>
          set ip6-prefix {ipv6-address}
        next
      end
      config ip6-rdnss-list
        edit <name>
          set ip6-rdnss {ipv6-address}
        next
      end 
    end     
  next
end
Sample command:
config system interface
  edit lan
    config ipv6
      set status enable
      set ip6-mode static
      set autoconf disable
      set ip6-send-adv enable
      set ip6-manage-flag disable
      set ip6-other-flag disable
      set ip6-max-interval 600
      set ip6-min-interval 198
      set ip6-adv-rio disable
      set ip6-address 2001:3:6:7::/64
      set ip6-gw ::
      set ip6-allowaccess http https ping snmp ssh
      set distance 10
      config ip6-prefix-list
        edit 1
          set ip6-prefix 2001:2:3::/64
        next
      end
      config ip6-rdnss-list
        edit 1
          set ip6-rdnss 3:5a:78::
        next
      end 
    end     
  next
end
Parameter Description Type Size Default
status Status of the interface. option -
Option Description
enable Enable the
disable Disable
ip6-mode Addressing mode (static, DHCP, delegated). option -

Option

Description

static

Static setting.

dhcp

DHCPv6 client mode.

pppoe

IPv6 over PPPoE mode.

delegated

IPv6 address with delegated prefix.

autoconf Enable/disable address auto config. option - disable

Option

Description

enable

Enable auto-configuration.

disable

Disable auto-configuration.

ip6-send-adv Enable/disable sending router advertisement (RA) messages about the interface. option - disable

Option

Description

enable

Enable sending RA messages about this interface.

disable

Disable sending RA messages about this interface.

ip6-manage-flag

Specify whether to set an M-flag

option

disable

Option

Description

enable

Enable the M-flag.

disable

Disable the M-flag.

ip6-other-flag

Specify whether to set an O-flag.

option

-

disable

Option

Description

enable

Enable the O-flag.

disable

Disable the O-flag.

ip6-max-interval

Specify maximum RA sending interval.

integer

4-1800

600

ip6-min-interval

Specify minimum RA sending interval.

integer

3-1350

600

ip6-address Primary IPv6 address prefix. IPv6-prefix - ::/0

ip6-adv-rio

Specify whether to enable router information option

option

-

disable

Option

Description

enable

Enable router information option.

disable

Disable router information option.

ip6-route-pref

Specify router preference level. This option is hidden when ip6-adv-rio disabled.

option

-

medium

Option

Description

low

Set the router preference level to low.

medium

Set the router preference level to medium.

high

Set the router preference level to high.

ip6-upstream-interface

Specify the IPv6 interface name providing delegated information.

This option is available when ip6-mode is set to delegate.

option

-

-

ip6-gw IPv6 Gateway. Syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx. string ipv6-address ::
ip6-allowaccess Allow management access to the interface. option -

Option Description
http HTTP access.

https

HTTPS access.

ping PING access.

snmp

SNMP access.

ssh

SSH access.

distance Route metric of the interface gateway. number 1-255 10

ip6-prefix-list

Specify the RA prefix info. You can create multiple prefixs.

table

-

null

ip6-rdnss-list

Specify the RA DNS service info. You can create multiple DNS entries.

table

-

null

config ipv6

config ipv6

Description: Configure the IPv6 interface settings.

config system interface
  edit <name>
    config ipv6
      set status [enable | disable]
      set ip6-mode [static | dhcp | pppoe | delegated]
      set autoconf [enable | disable]
      set ip6-send-adv [enable | disable]
      set ip6-manage-flag [enable | disable]
      set ip6-other-flag [enable | disable]
      set ip6-max-interval <4-1800>
      set ip6-min-interval <3-1350>
      set ip6-address {ipv6-address}
      set ip6-adv-rio [enable | disable]
      set ip6-route-pref [low | medium | high]
      set ip6-gw {ipv6-address}
      set ip6-upstream-interface [option1 | ...]
      set ip6-allowaccess [http | https | ping | snmp | ssh]
      set distance {number}
      config ip6-prefix-list
        edit <name>
          set ip6-prefix {ipv6-address}
        next
      end
      config ip6-rdnss-list
        edit <name>
          set ip6-rdnss {ipv6-address}
        next
      end 
    end     
  next
end
Sample command:
config system interface
  edit lan
    config ipv6
      set status enable
      set ip6-mode static
      set autoconf disable
      set ip6-send-adv enable
      set ip6-manage-flag disable
      set ip6-other-flag disable
      set ip6-max-interval 600
      set ip6-min-interval 198
      set ip6-adv-rio disable
      set ip6-address 2001:3:6:7::/64
      set ip6-gw ::
      set ip6-allowaccess http https ping snmp ssh
      set distance 10
      config ip6-prefix-list
        edit 1
          set ip6-prefix 2001:2:3::/64
        next
      end
      config ip6-rdnss-list
        edit 1
          set ip6-rdnss 3:5a:78::
        next
      end 
    end     
  next
end
Parameter Description Type Size Default
status Status of the interface. option -
Option Description
enable Enable the
disable Disable
ip6-mode Addressing mode (static, DHCP, delegated). option -

Option

Description

static

Static setting.

dhcp

DHCPv6 client mode.

pppoe

IPv6 over PPPoE mode.

delegated

IPv6 address with delegated prefix.

autoconf Enable/disable address auto config. option - disable

Option

Description

enable

Enable auto-configuration.

disable

Disable auto-configuration.

ip6-send-adv Enable/disable sending router advertisement (RA) messages about the interface. option - disable

Option

Description

enable

Enable sending RA messages about this interface.

disable

Disable sending RA messages about this interface.

ip6-manage-flag

Specify whether to set an M-flag

option

disable

Option

Description

enable

Enable the M-flag.

disable

Disable the M-flag.

ip6-other-flag

Specify whether to set an O-flag.

option

-

disable

Option

Description

enable

Enable the O-flag.

disable

Disable the O-flag.

ip6-max-interval

Specify maximum RA sending interval.

integer

4-1800

600

ip6-min-interval

Specify minimum RA sending interval.

integer

3-1350

600

ip6-address Primary IPv6 address prefix. IPv6-prefix - ::/0

ip6-adv-rio

Specify whether to enable router information option

option

-

disable

Option

Description

enable

Enable router information option.

disable

Disable router information option.

ip6-route-pref

Specify router preference level. This option is hidden when ip6-adv-rio disabled.

option

-

medium

Option

Description

low

Set the router preference level to low.

medium

Set the router preference level to medium.

high

Set the router preference level to high.

ip6-upstream-interface

Specify the IPv6 interface name providing delegated information.

This option is available when ip6-mode is set to delegate.

option

-

-

ip6-gw IPv6 Gateway. Syntax: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx. string ipv6-address ::
ip6-allowaccess Allow management access to the interface. option -

Option Description
http HTTP access.

https

HTTPS access.

ping PING access.

snmp

SNMP access.

ssh

SSH access.

distance Route metric of the interface gateway. number 1-255 10

ip6-prefix-list

Specify the RA prefix info. You can create multiple prefixs.

table

-

null

ip6-rdnss-list

Specify the RA DNS service info. You can create multiple DNS entries.

table

-

null