Skip to main content
gray6
gray6
New Member
May 28, 2022
Question

How to use multiple static WAN IP addresses on a Fortigate?

  • May 28, 2022
  • 2 replies
  • 7926 views

I'm in the process of getting familiar with the Fortigate UI, and the nomenclature differences between it and my old firewall is hobbling me a bit. I'm hoping someone can kindly point me in the right direction on how to do what I'm looking to do.

I have five static public IP addresses (let's say 209.x.x.1, 209.x.x.2, 209.x.x.3, etc). I'd like for outgoing traffic coming from subnet 10.1.1.1/24 to have a public IP 209.x.x.1. I'd then like for outgoing traffic coming from subnet 10.2.1.1/24 to use the public IP of 209.x.x.2. And so forth. (This is just a rough example.)

How do I achieve this on Fortigate? Thank you!

2 replies

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
May 28, 2022

Relatively simple. Basic steps are below:
1. Create an IP Pool per each outside IP

2. Create a policy and specify the source with each internal subnet and other as you would do for any regular outgoing policies, then at the NAT section, select "Use Dynamic IP Pool" and select one of IP Pools you created.

 

Toshi

Debbie_FTNT
Staff & Editor
Debbie_FTNT
Staff & Editor
May 30, 2022

As Toshi outlined above, five pools, and then five policies (one for each internal network) with a specific NAT pool would do it.

You could also look into Central NAT - that would let you create centralized NAT rules independent of policies (so subnet A would always be NATed to public IP A, and B NATed to B, etc, and you could have a single policy for subnets A-E going out), if you're going to have complex NAT requirements and don't want to handle those via separate firewall policies.

Terms & ConditionsAccessibility statement