Skip to main content
ftristao
ftristao
New Member
April 8, 2021
Question

Ip-pools and routing tables

  • April 8, 2021
  • 1 reply
  • 2016 views

Hi! I'm asking about how does fortigate decide wich pool to use when the rule is built on a zone (two wans) and it is configured to use two pools, one of each net.

    1 reply

    lobstercreed
    lobstercreed
    New Member
    April 12, 2021

    Hey Francisco,

     

    Great question that I ran into months ago when doing a particular SD-WAN design.  There are two solutions as I understand it.  #2 is what I am moving to shortly (I think it makes more sense to folks with experience on other vendors, especially Cisco), but I used #1 for my PoC.

     

    [ol]
  • From CLI, set associated-interface for the IP pool.  Select both IP pools on the rule and the right one will get chosen based on the egress interface.
  • If your "zone" is an SD-WAN zone (6.4 code), you can use Central NAT and the SNAT policy table to specify which IP pool is used when egressing a particular interface.[/ol]

    Hope that helps you!  - Daniel

    • Terms & ConditionsAccessibility statement