{"id":7730,"date":"2024-03-01T07:11:54","date_gmt":"2024-03-01T07:11:54","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=7730"},"modified":"2024-03-01T07:11:55","modified_gmt":"2024-03-01T07:11:55","slug":"azure-fortigate-vm-and-nat64","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/azure-fortigate-vm-and-nat64","title":{"rendered":"Azure Fortigate VM and Nat64"},"content":{"rendered":"\n<p><a href=\"https:\/\/github.com\/pariswells\/public-code\/blob\/master\/r-fgt6-FGT_7-2_1577_202402282151.conf\">https:\/\/github.com\/pariswells\/public-code\/blob\/master\/r-fgt6-FGT_7-2_1577_202402282151.conf<\/a><\/p>\n\n\n\n<p>This does not work nicely , you have to add another IPv6 address to your NIC ( cannot just be one ) . One is for your external interface, and the other is for VIP. Additionally, on the internal NIC, you need to add another IPv4 address as a secondary IP in the internal interface, as we can&#8217;t use the IP address of your internal interface in the IP Pool.<\/p>\n\n\n\n<p>The main issue is that on Azure, we can&#8217;t add multiple IPv6 addresses to a single interface. So, the workaround is to add a new NIC and attach it to your FortiGate. Then, we need to ensure that this NIC has an IPv6 address. Because we didn&#8217;t do this, your local traffic doesn&#8217;t know how to get out since the IP address is not set in the Azure NIC.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-External-NIC-IP-Addressing-1.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"338\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-External-NIC-IP-Addressing-1-1024x338.jpg\" alt=\"\" class=\"wp-image-7732 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-External-NIC-IP-Addressing-1-1024x338.jpg 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-External-NIC-IP-Addressing-1-300x99.jpg 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-External-NIC-IP-Addressing-1-768x253.jpg 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-External-NIC-IP-Addressing-1.jpg 1313w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-Internal-NIC-IP-Addressing-1.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"303\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-Internal-NIC-IP-Addressing-1-1024x303.jpg\" alt=\"\" class=\"wp-image-7733 img-responsive\" style=\"width:893px;height:auto\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-Internal-NIC-IP-Addressing-1-1024x303.jpg 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-Internal-NIC-IP-Addressing-1-300x89.jpg 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-Internal-NIC-IP-Addressing-1-768x227.jpg 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Azure-Internal-NIC-IP-Addressing-1.jpg 1309w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Assign-different-IPv6-on-External-Interface-1.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"545\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Assign-different-IPv6-on-External-Interface-1-1024x545.jpg\" alt=\"\" class=\"wp-image-7731 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Assign-different-IPv6-on-External-Interface-1-1024x545.jpg 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Assign-different-IPv6-on-External-Interface-1-300x160.jpg 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Assign-different-IPv6-on-External-Interface-1-768x409.jpg 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Assign-different-IPv6-on-External-Interface-1-1536x818.jpg 1536w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Assign-different-IPv6-on-External-Interface-1.jpg 1903w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/FortiGate-Internal-Interface-Settings-1.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"638\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/FortiGate-Internal-Interface-Settings-1-1024x638.jpg\" alt=\"\" class=\"wp-image-7734 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/FortiGate-Internal-Interface-Settings-1-1024x638.jpg 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/FortiGate-Internal-Interface-Settings-1-300x187.jpg 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/FortiGate-Internal-Interface-Settings-1-768x479.jpg 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/FortiGate-Internal-Interface-Settings-1-1536x957.jpg 1536w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/FortiGate-Internal-Interface-Settings-1.jpg 1903w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/I-used-the-Secondary-IPv6-sets-on-the-Azure-NIC-1.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"494\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/I-used-the-Secondary-IPv6-sets-on-the-Azure-NIC-1-1024x494.jpg\" alt=\"\" class=\"wp-image-7735 img-responsive\" style=\"width:840px;height:auto\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/I-used-the-Secondary-IPv6-sets-on-the-Azure-NIC-1-1024x494.jpg 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/I-used-the-Secondary-IPv6-sets-on-the-Azure-NIC-1-300x145.jpg 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/I-used-the-Secondary-IPv6-sets-on-the-Azure-NIC-1-768x370.jpg 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/I-used-the-Secondary-IPv6-sets-on-the-Azure-NIC-1-1536x740.jpg 1536w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/I-used-the-Secondary-IPv6-sets-on-the-Azure-NIC-1.jpg 1917w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/IP-Pool-used-the-secondary-IP-I-set-on-Internal-interface-1.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"489\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/IP-Pool-used-the-secondary-IP-I-set-on-Internal-interface-1-1024x489.jpg\" alt=\"\" class=\"wp-image-7736 img-responsive\" style=\"width:844px;height:auto\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/IP-Pool-used-the-secondary-IP-I-set-on-Internal-interface-1-1024x489.jpg 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/IP-Pool-used-the-secondary-IP-I-set-on-Internal-interface-1-300x143.jpg 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/IP-Pool-used-the-secondary-IP-I-set-on-Internal-interface-1-768x367.jpg 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/IP-Pool-used-the-secondary-IP-I-set-on-Internal-interface-1-1536x734.jpg 1536w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/IP-Pool-used-the-secondary-IP-I-set-on-Internal-interface-1.jpg 1916w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Policy-is-being-used-now-1.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"36\" src=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Policy-is-being-used-now-1-1024x36.jpg\" alt=\"\" class=\"wp-image-7737 img-responsive\" srcset=\"https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Policy-is-being-used-now-1-1024x36.jpg 1024w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Policy-is-being-used-now-1-300x10.jpg 300w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Policy-is-being-used-now-1-768x27.jpg 768w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Policy-is-being-used-now-1-1536x53.jpg 1536w, https:\/\/pariswells.com\/blog\/wp-content\/uploads\/2024\/03\/Policy-is-being-used-now-1.jpg 1723w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>https:\/\/github.com\/pariswells\/public-code\/blob\/master\/r-fgt6-FGT_7-2_1577_202402282151.conf This does not work nicely , you have to add another IPv6 address to your NIC ( cannot just be one ) . One is for [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-7730","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/7730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=7730"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/7730\/revisions"}],"predecessor-version":[{"id":7738,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/7730\/revisions\/7738"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=7730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=7730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=7730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}