FortiOS 5.6 Online Help Link FortiOS 5.4 Online Help Link FortiOS 5.2 Online Help Link FortiOS 5.0 Online Help Link

Home > Online Help

> Chapter 17 - IPv6 > IPv6 Features > DHCPv6


You can use DHCP with IPv6 using the CLI. To configure DHCP, ensure IPv6 is enabled by going to System > Feature Select and enabling IPv6.

Use the CLI command

config system dhcp6


For more information on the configuration options, see the FortiGate CLI Reference.

DHCP delegated mode

Downstream IPv6 interfaces can receive address assignments on delegated subnets from a DHCP server that serves an upstream interface.

DHCPv6-PD configuration

Enable DHCPv6 Prefix Delegation on upstream interface (port10):

config system interface
   edit "port10"
     config ipv6
       set dhcp6-prefix-delegation enable

Assign delegated prefix on downstream interface (port1). Optionally, specific delegated prefixes can be specified:

config system interface
  edit "port1"
    config ipv6
      set ip6-mode delegated
      set ip6-upstream-interface "port10"
      set ip6-subnet ::1:0:0:0:1/64
      set ip6-send-adv enable
      config ipv6-delegated-prefix-list
        edit 1
          set upstream-interface "port10"
          set autonomous-flag enable
          set onlink-flag enable
          set subnet 0:0:0:100::/64
DHCPv6 Server configuration

Configuring a server that uses delegated prefix and DNS from upstream:

config system dhcp6 server
   edit 1
     set dns-service delegated
     set interface "wan2"
     set upstream-interface "wan1"
     set ip-mode delegated
     set subnet 0:0:0:102::/64

DHCPv6 relay

You can use the following command to configure a FortiGate interface to relay DHCPv6 queries and responses from one network to a network with a DHCPv6 server and back. The command enables DHCPv6 relay and includes adding the IPv6 address of the DHCP server that the FortiGate unit relays DHCPv6 requests to:

config system interface

edit internal

config ipv6

set dhcp6-relay-service enable

set dhcp6-relay-type regular

set dhcp6-relay-ip 2001:db8:0:2::30