Skip to main content
ForgetItNet
Explorer II
April 11, 2022
Question

Add a second IP to Wan Interface for SIP traffic

Hi all,

This is a quick question but just wanted to clarify it as I'm new to FortiGate's but we've got 2 WAN lines and our SIP traffic is pointed at one (WAN2). We want to point it to an IP on the other line (WAN1) so currently WAN1 has 1 IP assigned to it ending in .130 and the IP we want to use for the SIP is .131. As there are currently some Firewall Policies that reference the current line (WAN2) are we just ok to add the .131 as a secondary IP onto WAN1 and then simply choose WAN1 on the Policies instead of WAN2 or is there some special way of setting up another interface that we will need to do ?

Thanks

Ian

2 replies

sw2090
SuperUser
SuperUser
April 11, 2022

you can only set a secondary ip from out of the same subnet on the same interface that has primary ip in that subnet. So you have to do it on wan1 I suppose. Then you might have to deal around with Nat probably to make sure sip traffic goes out with the correct wan ip...

ForgetItNet
Explorer II
April 11, 2022

That's fine then, that's what i've done on previous routers but just wanted to make sure.

Thanks

 

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT