Skip to main content
Julien33x
New Member
September 28, 2016
Question

F60D - Help - Internet Provider Private IP ( vlan ) - Public on another interface

  • September 28, 2016
  • 2 replies
  • 3325 views

Hello,

 

Internet Provider gave us , these informations "like" that :

 

Private IP on Vlan : 10.1.1.2 

Gateway : 10.1.1.1

 

Public IP : 105.105.100.100

 

For now , I am able to get access to the router from outside when :

 

On WAN1, I created a VLAN int for the Private IP

Add a route : 0.0.0.0.0/0 > 10.1.1.1

 

On WAN1 , I have tried two thing , create a vlan int with Public IP or a loopback with the IP Public too

 

For the Policy for now ,  I let Any to Any > ACCEPT

 

I also able to create a VPN between this router and another forti on another site , this is only working when I select the interface with the Public IP

 

Another thing working, is the ping only when I'm using the command : exe ping-options source 105.105.100.100

before trying to ping 8.8.8.8 for example

 

I have for now , no computer connected on local network. I am doing my test only from the web interface or CLI of the router

 

What do I need to do to not have to specify the source ping-option and enable Internet access for all and from the Router Interface or CLI

 

Thans 

Best regards

Julien

 

Add a route : 0.0.0.0.0/0 > 10.1.1.1

    2 replies

    ede_pfau
    SuperUser
    SuperUser
    September 28, 2016

    Just a small tip: the default route should point to the next hop, 10.1.1.2. The other address will work as well, as ICMP will redirect it.

    Julien33x
    Julien33xAuthor
    New Member
    September 28, 2016

    I d'ont really understand 

     

    10.1.1.2 is my Private IP given by ISP.

     

     

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.