FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
akileshc
Staff
Staff
Article Id 196066

Description
This article explains about difference in advertising the subnet/route in OSPFv3.

Solution
Overview.

- OSPF version 3 (OSPFv3) includes support for IPv6, configurable from the CLI only.
Generally, all IP addresses are in IPv6 format instead of IPv4.
However, OSPFv3 area numbers use the same 32-bit numbering system as OSPFv2, as described in RFC 2740.
Likewise, the router ID and area ID are in the same format as OSPFv2.


- For IPv6, the main difference in OSPFv3 is that rather than using a network statement to enable OSPFv3 on an interface.
Define OSPF6 (OSPF for IPv6) interfaces, which are bound to the interface and area.
This configuration needs to be done from the CLI, as follows (with sample interfaces and addresses):


Network Diagram.



 
 
CLI syntax (FGT1).  
# config router ospf6
    set router-id 1.1.1.1
    # config area
        edit 0.0.0.0
        next
    end
    # config ospf6-interface
        edit "1"
            set interface "port1"
        next
        edit "2"
            set interface "port4"
        next
    end
Here, the Subnets associated with both the interfaces 'port1' and 'port4' will be advertised to the OSPFv3 neighbor (FGT2).

Interface Configuration: (FGT1).
# config system interface
    edit "port1"
        # config ipv6
            set ip6-address 9001::1/64
             end
    next
 edit "port4"
        # config ipv6
            set ip6-address 2002::2/128
       end
Routes received Over OSPFv3 neighbor: (FGT2).
# get router info6 routing-table database
IPv6 Routing Table
O    *> 2002::2/128 [110/2] via fe80::278:65ff:fe6e:901, port1, 00:00:31
O    *> 9001::/64 [110/2] via fe80::278:65ff:fe6e:901, port1, 00:00:31

# get router info6 ospf route
OSPFv3 Process (root)
O  2002::2/128                                        2
     via fe80::278:65ff:fe6e:901, port1, Area 0.0.0.0
O  9001::/64                                          2
     via fe80::278:65ff:fe6e:901, port1, Area 0.0.0.0

Related link:

https://help.fortinet.com/fos50hlp/56/Content/FortiOS/fortigate-networking/fortigate-advanced-routin...



Contributors