fortigate-ipsec-40-mr3

IPv6 IPsec VPNs Site-to-site IPv6 over IPv4 VPN example
config firewall policy
edit 1
set srcintf port3
set dstintf toA
set srcaddr all
set dstaddr all
set action accept
set service ANY
set schedule always
next
edit 2
set srcintf toA
set dstintf port3
set srcaddr all
set dstaddr all
set action accept
set service ANY
set schedule always
end
config router static6
edit 1
set device port2
set dst 0::/0
next
edit 2
set device toA
set dst 192.168.2.0/24
end
Site-to-site IPv6 over IPv4 VPN example
In this example, IPv6-addressed private networks communicate securely over IPv4 public
infrastructure.
Figure 32: Example IPv6-over-IPv4 VPN topology
Port 3
fec0:0000:0000:0000::/64
Port 2
10 110.0.0.1/24
Fo Fo Fo Fo Fo Fort FortiGate rt rt rt rrtiGG iG iG iG iGat Gat
at at at ateeee e AA A
Port 2
10.0.1.1/24
Fo Foo Fort FortiGate rt rrtiG iG iG iGat at at ateee BBBB
fec0:0000:0000:0004::/64
Configure FortiGate A interfaces
Port 2 connects to the IPv4 public network and port 3 connects to the IPv6 LAN.
FortiOS Handbook v3: IPsec VPNs
01-434-112804-20120111 195
http://docs.fortinet.com/
PPPPPPo Po PPort r 3