Skip to main content
graham_morrison
New Member
February 24, 2020
Question

Fortigate 60E with a 4G bridge modem - Private addressing

  • February 24, 2020
  • 4 replies
  • 4554 views

Good afternoon everyone,

 

I have been tasked with getting a remote site up and running with a 4G solution since there is no fixed line broadband at the site.  The idea is to get a vpn back to head office working by having the remote 60e configured as a dial up vpn client back to our main fortigate fw.  This has been tested in our office and the tunnel routed the data traffic no problem.  

 

My issue right now is with the addressing.  For the data network at the remote site its not a problem as its using a 172. private address.  My problems is that our phone system uses a 10. address schema and my l3 switch on site uses a small 10.255 netwrk between itself and the fw.  When i look at the wan interface on the 60e the 4G network is giving me a 10. address but with an 8 bit mask over it.  That blocks out me using any of the private 10 range on my internal network.  For the small network between the l3 switch and fw its not really a problem as i can just change that to a 192 address on each side.  My real issue is what i do with the 10. voice network.

 

Thanks in advance for any replies.

    4 replies

    supportombm
    New Member
    February 24, 2020

    If i understand properly:

    You have 4G 10.0.0.0/8 and a voice network on 10.X.X.X/something if it's like this than you change it :\

    10/8 is usually a "private mask" of the provider for NATTING.

    I had this problem myself. I changed 2 of my private lan cause there was a conflict like this. Or if your 4G providers response time are short u can ask for a de-natting and get a dynamic public IP.

    graham_morrison
    New Member
    February 24, 2020

    I had a feeling when i came across this issue today that readdressing the LAN was going to be the only option for me to get this up and running.  At least its just a few phones and not all the PC's :) Its going to be EE or BT that will be providing the sims so not even sure they offer that as a service.

    supportombm
    New Member
    February 24, 2020

    Yeah, this problem occurs because privders don't want to start using ipv6 for public address so they do this bullshit, and tbh 4G for office are underrated so they manage it in the easiest way possible. Btw yes better than change ip of PC's and server's! 

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.