> Chapter 14 - IPsec VPN > IPv6 IPsec VPNs

IPv6 IPsec VPNs

This chapter describes how to configure your FortiGate unit’s IPv6 IPsec VPN functionality.

By default IPv6 configurations to not appear on the Web-based Manager. You need to enable the feature first.

To enable IPv6

1. Go to System > Admin > Settings.
2. In the Display Options on GUI section, select IPv6.
3. Select Apply.

The following topics are included in this section:

Overview of IPv6 IPsec support

Configuring IPv6 IPsec VPNs

Site-to-site IPv6 over IPv6 VPN example

Site-to-site IPv4 over IPv6 VPN example

Site-to-site IPv6 over IPv4 VPN example

Certificates

On a VPN with IPv6 Phase 1 configuration, you can authenticate using VPN certificates in which the common name (cn) is an IPv6 address. The cn-type keyword of the user peer command has an option, ipv6, to support this.