IPv6
New IPv6 features include:
IPv6 Address Ranges
IPv6 address ranges can now be created, using either the web-based manager or the CLI.
Syntax
config firewall address6
edit <name>
set type iprange
set start-ip <address>
set end-ip <address>
end
end
TCP MSS Values
TCP MSS values for both the sender and the receiver can now be set for IPv6 policies using the CLI.
Syntax
config firewall policy6
edit <index_int>
set tcp-mss-sender <value>
set tcp-mss-receiver <value>
end
end
RSSO Support
RADIUS Single Sign-On (RSSO) is supported in IPv6 and can be configured in the CLI. Fallthrough for unauthenticated
Syntax
config firewall policy6
edit <id>
set rsso enable
set fall-through-unauthenticated enable
end
end
FortiManager Connections
IPv6 can now be used to connect a FortiGate unit to a FortiManager unit.
Geographical Database
An IPv6 geographical database has been added to properly identify the geographical locations of traffic in reports.