Skip to main content
DearkMasterMU
New Member
March 11, 2021
Solved

Connect Fortigate 60E to CANTV Metro Ethernet

  • March 11, 2021
  • 1 reply
  • 6569 views

Hi

We have a Venezuela CANTV Metro Ethernet link and we need to connect to Fortigate 60E in port 7 (WAN1 & 2 are in use in a SD-WAN and we need to include this link)

 

We received from CANTV the follow parameters

VLAN:                   118

CANTV WAN IP:     190.202.4.9

Customer WAN IP: 190.202.4.10

WAN Mask:            255.255.255.252

LAN IP:                 201.249.206.128 

IP Available:          201.249.206.129 to 134 (135 is for broadcast)

LAN Mask:            255.255.255.248

 

Someone can help us? We will appreciate a lot...

 

Regard

    Best answer by sw2090

    I can't say for sure.

     

    I just guess:

     

    CANTV WAN IP:     190.202.4.9 Customer WAN IP: 190.202.4.10

     

    this is PTP between CANTV and your Model or whatever is connected to the port on FGT.

     

    LAN IP:                 201.249.206.128  IP Available:          201.249.206.129 to 134 (135 is for broadcast) LAN Mask:            255.255.255.248

     

    this is what your port needs.

     

    Accoarding to the LAN Mask that's a /29 subnet. That means:

    201.249.206.128 is network address (cannot be given to any interface)

    201.249.206.129-134 are 6 usable IP Addresses you can put up on your interface.

    201.249.206.135 is broadcast address (cannot be given to any interface)

     

    so just the default gw is unclear. I'd try the CANTV WAN IP as gateway.

     

    1 reply

    sw2090
    SuperUser
    sw2090Answer
    SuperUser
    March 11, 2021

    I can't say for sure.

     

    I just guess:

     

    CANTV WAN IP:     190.202.4.9 Customer WAN IP: 190.202.4.10

     

    this is PTP between CANTV and your Model or whatever is connected to the port on FGT.

     

    LAN IP:                 201.249.206.128  IP Available:          201.249.206.129 to 134 (135 is for broadcast) LAN Mask:            255.255.255.248

     

    this is what your port needs.

     

    Accoarding to the LAN Mask that's a /29 subnet. That means:

    201.249.206.128 is network address (cannot be given to any interface)

    201.249.206.129-134 are 6 usable IP Addresses you can put up on your interface.

    201.249.206.135 is broadcast address (cannot be given to any interface)

     

    so just the default gw is unclear. I'd try the CANTV WAN IP as gateway.

     

    DearkMasterMU
    New Member
    March 11, 2021

    Thanks a lot

    All your guess are right. My problem: how we configure this in our Fortigate, port 7?

    Regards

    sw2090
    SuperUser
    SuperUser
    March 12, 2021

    set the port to static ip configuration.

    Give it one out of the usable ips (or annother as secondary ip if you want/need it).

    Add the port to sd-wan and sd-wan health check and enter the default gateway there.