Skip to main content
kabrutus
kabrutus
New Member
July 1, 2015
Question

Getting private range on Wan dont want to double nat

  • July 1, 2015
  • 2 replies
  • 5674 views

I have a sonic wall as the router.  (Not mine), it is giving me a natted 192.168.101.x ip address on my wan interface.  On my Fortigate 100D i want to have a dhcp range of 172.16.0.0/22 for my lan interface.  I do not want to double nat, is there a way to use the natting coming from the sonicwall and disable nat on the fortigate?

    2 replies

    Sandeep_FTNT
    Staff
    Sandeep_FTNT
    Staff
    July 1, 2015

    On fortigate you simply create a firewall policy from LAN to WAN without NAT enabled in it , which is essentially route mode . On sonicwall create a static route for 172.16.0.0/22 subnet with gateway as IP address WAN interface of fortigate . 

    kabrutus
    kabrutusAuthor
    New Member
    July 1, 2015

    So i would have to add 192.168.101.25(fortigate WAN IP) on the sonic walls static route?

    Sandeep_FTNT
    Staff
    Sandeep_FTNT
    Staff
    July 1, 2015

    Static route on sonicwall should be like below

    Destination: 172.16.0.0/22

    Gateway - 192.168.101.25

    Terms & ConditionsAccessibility statement