Technical Note: How to create secondary IPv6 addresses for interfaces on FortiGates managed by FortiManager

[Andy_G]

Description

This article explains how to create secondary IPv6 addresses for interfaces on FortiGates managed by FortiManager.

Solution

The FortiGate needs to be managed by a FortiManager running firmware version 5.4.

• Navigate to Device Manager and double-click on the FortiGate on which the changes are to be made, entering its dashboard.
• Enable displaying CLI-only Objects in the Display Options for the FortiGate (this might require enabling overriding ADOM settings).
• Select 'CLI-only Objects'.
• Go to System > Interface.
• Select the specific interface.
• Enable secondary IP.
• Some lists, possibly empty, will be displayed underneath the 'Apply' Button (It will be necessary to scroll down).
• The first is "ip6-delegated-prefix-list" and then "ip6-extra-addr".  This is the list of secondary IPv6 addresses associated with the interface.
• Right-click on 'No record found' and select 'New'.
• Enter the IPv6 details as required.
• Save the change.
• Install the device setting to the FortiGate via the install wizard.