16.2 IPv6 SLB

16.2.1 Overview

FortiBalancer provides comprehensive IPv6 support for the SLB module. For the service layer, SLB services from Layer 2 to 7 all support IPv6. For the service type, all of the service types except RDP, SIPUDP and SIPTCP support IPv6. For the SLB method and policy, all of the SLB methods except SNMP and all of the SLB policies support IPv6. Additionally, for the three SLB deployment modes, IPv6 is supported as follows: Ÿ            IPv6 to IPv4 (supported by the reverse proxy mode)

• IPv4 to IPv6 (supported by the reverse proxy mode)
• IPv6 to IPv6 (supported by the reverse proxy mode, transparent mode and triangle mode) Among which, the reverse proxy mode can work in the IPv4/IPv6 co-existing network environment, as well as in the IPv4 only or IPv6 only network environment. The transparent mode and triangle mode can only work in the IPv4 only or IPv6 only network environment.

The following figure shows the topology of the “IPv6 to IPv4” deployment method.

 

Figure 16-1 “IPv6 to IPv4” of the SLB topology

Likewise, the “IPv4 to IPv6” deployment method can be adopted by configuring an IPv4 address for the virtual service and an IPv6 address for the real server.

For the “IPv6 to IPv6” deployment method, both the virtual service and real server should be configured with IPv6 addresses.

16.2.2 Configuration Example

• web UI:
  1. Select Server Load Balance > Real Services > Real Services. Click the Add Real Service Entry action link, specify parameters in the Add Real Service Entry area and click the Save action link.

 

2. Select Server Load Balance > Groups > Groups. Specify parameters in the Add Group area and click the Add action link. In the Groups List table, double-click a group. Click the Add action link in the Group Members area of the new popup page. Specify parameters in the Add Group Member area and click the Save action link.

 

3. Select Server Load Balance > Virtual Services > Virtual Services. Specify parameters in the Add Virtual Service area and click the Add action link. In the Virtual Service List table, double-click a virtual service. Associate the virtual service with the default or backup policy in the Associate Groups area, and then click the Add action link.

 

• CLI:
  1. Execute the following command to configure the IPv6 virtual service:

slb virtual http <virtual_name> <vip> [vport] [arp|noarp] [max_conn]

For example:

FortiBalancer(config)#slb virtual http virtualserv 3fff::251 8080 1000 tcp 3 3

2. Execute the following command to configure the SLB policy:

slb policy default {virtual_name|vlink_name} {group_name|vlink_name}

For example:

FortiBalancer(config)#slb default virtualserv g1

3. Execute the following command to configure the real server and SLB group:

slb real http <real_name> <ip> [port] [max_conn]

[http|tcp|icmp|script-tcp|script-udp|sip-tcp|sip-udp|dns|none] [hc_up] [hc_down]

slb group method <group_name> [algorithm]

For example:

FortiBalancer(config)#slb real http Serv1 172.16.65.251

FortiBalancer(config)#slb real http Serv2 172.16.66.251

FortiBalancer(config)#slb group method g1 rr