Skip to main content
Liza1
Explorer II
Jun 24, 2024 1:37 PM UTC
Solved

OSPF with virtual IPs

Hello, I need your help. I have the following issue: I work with Fortigate Firewall, and my task is to connect my network to another Cisco router. My OSPF is working fine; it sees the internal LAN networks. However, I also need to set up NAT. I need to NAT from my other LAN, 192.168.0.5, to 10.10.10.10 (for example), and ensure they can see this route. I tried using Virtual IPs, but it didn't work out. How can I set up destination NAT and advertise the route in OSPF?
FortiGate #OSPF #virtualIP 

Toshi_Esumi
SuperUser
Jun 24, 2024 2:39 PM UTC

If you have 10.10.10.10 in ippool and configured SNAT translating from 192.168.0.5 when it goes out and want to advertise 10.10.10.10 to OSPF neighbors, you can try below (static route to blackhole then reistribute static):
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-Advertise-IP-Pool-network-into-OSPF/ta-p/190642

Toshi

1 reply

Toshi_Esumi
SuperUser
SuperUser
Jun 24, 2024 2:39 PM UTC

If you have 10.10.10.10 in ippool and configured SNAT translating from 192.168.0.5 when it goes out and want to advertise 10.10.10.10 to OSPF neighbors, you can try below (static route to blackhole then reistribute static):
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-Advertise-IP-Pool-network-into-OSPF/ta-p/190642

Toshi

Translate
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024