Skip to main content
A
Anonymous_User
Contributor
November 20, 2006
Question

IP alias on an interface

  • November 20, 2006
  • 5 replies
  • 6899 views
i checked that more than one IP can be added to the interface through the " secondary IP" interface, but can all of the IPs are in the same subnet ? e.g. Primary IP: 192.168.1.1 Secondary IP: 192.168.1.210 Secondary IP: 192.168.1.254

    5 replies

    A
    Anonymous_UserAuthor
    Contributor
    November 20, 2006
    yes, eg in v2.8 config system global set allow-interface-subnet-overlap enable end
    A
    Anonymous_UserAuthor
    Contributor
    December 11, 2006
    thanks a lot the internal interface has IP 192.168.10.1 IP alias is 192.168.10.211 i typed that command and finally it works however i can' t ping .10.211 from machines directly connected to the internal interface i' m not sure if it' s related to firewall rules or routing stuff. Could anyone plz help ? Irene
    rwpatterson
    rwpatterson
    New Member
    December 11, 2006
    Try to open a telnet or web session to that IP instead. It may be that the Fortigate answers calls to that IP, but isn' t really that IP, so a ping would fail.
    A
    Anonymous_UserAuthor
    Contributor
    December 12, 2006
    I' m just curious what you would do with 2 ip addresses on the same interface in the same network?
    mikevan
    mikevan
    New Member
    January 10, 2007
    You would need this if you are proxying inbound to your network with the fortigate at the gateway. If you have 3 servers that require https access inside your network you would not be able to proxy on one port. SO you could then secondary ip addresses to make this happen.
    A
    Anonymous_UserAuthor
    Contributor
    December 12, 2006
    Hi.. Can i get info regarding how to configure secondary ip on an interface. we are using fortigate 500 with ver 2.80. Please give the command.. Preferably with an example. Regards, Sriharsha
    A
    Anonymous_UserAuthor
    Contributor
    December 12, 2006
    (on 2.8 MR11) config system interface edit " wan1" config secondaryip edit 1 //the " 1" here is the table index for your new entry. set ip 88.99.100.110 255.255.255.248 set gw .... end end end ... Type a " ?" anywhere and you will get a list oft commands / list of " next" parameters when used within statements.
    Terms & ConditionsAccessibility statement