Deployment Guide FortiGate IPoE 設定ガイド

1 Deployment Guide FortiGate IPoE . NTT . OCN IPoE . Version 2020 12 . Version 2020 7 .. 2. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer . P4. 2 FortiGate P7. 3 P 13. 4 IP8/IP16 P 15. P 18. 3. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer . NTT IPoE FortiGate .. IPoE NTT .. business/ connect/ocn-business/option/v-access-ipo e/ IP1 IP8 IP16 IP IP .. FortiGate .. FortiGate60F . FortiGate . CLI . GUI CLI . IPv4 IP . 4. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer . FortiGate 1-1. OS . FortiGate FortiGate60F 1-2.. HGW FortiGate HGW IPoE . HGW FortiGate HGW LAN.. < 1-2-1. >. 5. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer . < 1-2-2. >. 1-3.. started FortiGate .. Guide /901037/connecting-to-the-cli 6. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer FortiGate . 2-1. WAN1 IPv6 . CLI WAN1 . config system interface edit wan1.

2 Config ipv6. set dhcp6-information-request enable set autoconf enable set unique-autoconf-addr enable end next end 2-2.. CLI vne-tunnel . config system vne-tunnel set status enable set interface wan1. end 7. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer 2-3. DNS . DNS DHCPv6 information request .. config system dns unset primary unset secondary end 2-4. DNS . internal DNS recursive . config system dns-server edit internal next end 8. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer 2-5. IPv4 . CLI internal IPv4 Firewall dstintf .. config firewall policy edit 1. set name " ". set srcintf "internal". set dstintf " ". set srcaddr "all". set dstaddr "all". set action accept set schedule "always". set service "ALL". set tcp-mss-sender 1420. set tcp-mss-receiver 1420. set nat enable next end 9. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer 2-6.. config route static edit 1.

3 Set device next end 2-7. IPv6 Neighbor Discover Proxy . IPv6 Neighbor Discover Proxy wan1 internal . FortiGate IPv6 .. config system nd-proxy set status enable set member wan1 internal end 10. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer 2-8. IPv6 . ICMPv6,DHCPv6 v6 IPv6 v6. internal wan1 . IPv6 . config firewall multicast-policy6. edit 1. set srcintf wan1. set dstintf internal set srcaddr all set dstaddr all next edit 2. set srcintf internal set dstintf wan1. set srcaddr all set dstaddr all next end IPv6 . IPv6 . config firewall address6. edit "link-local". set ip6 fe80::/64. next end 11. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer internal wan1 . wan1 internal . wan1 internal .. config firewall policy edit 11. set name internal-to-wan1. set srcintf "internal". set dstintf "wan1". set srcaddr6 "all". set dstaddr6 "all". set action accept set schedule "always". set service "ALL".

4 Next edit 12. set name wan1-to-internal set srcintf "wan1". set dstintf "internal". set srcaddr6 "link-local". set dstaddr6 "link-local". set action accept set schedule "always". set service "ALL". next end 12. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer . 3-1. IPv6 . CLI WAN1 RA . IPv6 . # diagnose ipv6 address list # diagnose ipv6 address list dev=5 devname=wan1 flag=P scope=0 prefix=128. addr= XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX preferred=4294967295. valid=4294967295 cstamp=5447388 tstamp=5447388. dev=5 devname=wan1 flag= scope=0 prefix=64. addr= XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX preferred=604729. valid=2591929 cstamp=65148 tstamp=22556399. < >. IPv6 . RA Prefix IPv6 . 13. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer 3-2.. BR IPv6 . # diagnose ipv6 ipv6-tunnel list laddr FortiGate IPv6 raddr BR IPv6 rx tx .. devname= devindex=5 ifindex=24 vfid=0000 ref= 0.

5 Laddr= XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX raddr=XXXX:XXXX:XXXX::X. RX bytes:107123390 ( Mb) TX bytes:9005650 ( Mb);. RX packets:110958, TX packets:68744, TX carrier_err:0 collisions:0. npu-info: asic_offload=1, enc4/dec4=1/1, enc6/dec6=0/0, enc4_bk=-1/3/64, dec4_bk=-1/3/64, enc6_bk=0/0/0, dec6_bk=0/0/0. total tunnel = 1. IPv4 . # diagnose ip address list | grep vne IPv4 . IPv4 . IP= > index=22 devname= 14. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer IP8/IP16 . 4-1.. IP IP8(/29) IP16(/28) FortiGate . IP8 . < 4-1-1. >. < 4-1-2. >. 15. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer 4-2.. IPoE LAN 2 . IP8 . 4-3. IP . Unnumbered IP DMZ ARP .. config firewall ippool edit "pool1". set startip set endip set arp-intf dmz next end 4-4.. IP DMZ . IP16 /28 . config router static edit 2. set dst set device "dmz". next end 16. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer 4-5.

6 DMZ DMZ . / / ALL .. config firewall policy edit 21. set name "dmz-to-internet". set srcintf " " "dmz". set dstintf " " "dmz". set srcaddr "all". set dstaddr "all". set action accept set schedule "always". set service "ALL". next end IP8 . 17. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer .. 18. FortiGate IPoE NTT OCN IPoE Presented by Fortinet Systems Engineer