Skip to main content
Liza1
Explorer II
June 24, 2024
Solved

OSPF with virtual IPs

Hello, I need your help. I have the following issue: I work with Fortigate Firewall, and my task is to connect my network to another Cisco router. My OSPF is working fine; it sees the internal LAN networks. However, I also need to set up NAT. I need to NAT from my other LAN, 192.168.0.5, to 10.10.10.10 (for example), and ensure they can see this route. I tried using Virtual IPs, but it didn't work out. How can I set up destination NAT and advertise the route in OSPF?
FortiGate #OSPF #virtualIP 

Toshi_Esumi
SuperUser
June 24, 2024

If you have 10.10.10.10 in ippool and configured SNAT translating from 192.168.0.5 when it goes out and want to advertise 10.10.10.10 to OSPF neighbors, you can try below (static route to blackhole then reistribute static):
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-Advertise-IP-Pool-network-into-OSPF/ta-p/190642

Toshi

1 reply

Toshi_Esumi
SuperUser
SuperUser
June 24, 2024

If you have 10.10.10.10 in ippool and configured SNAT translating from 192.168.0.5 when it goes out and want to advertise 10.10.10.10 to OSPF neighbors, you can try below (static route to blackhole then reistribute static):
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-Advertise-IP-Pool-network-into-OSPF/ta-p/190642

Toshi

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT