Skip to main content
verOOnly
New Member
March 5, 2021
Question

second IP Address for Outgoing VIP Address

Hi All,

 

 

i'm having issue in setup my second IP address to my VIP address.

So, i have server that i want incoming and outgoing IP Public Address is using different IP Address from my fortigate.

The incoming is working but outgoing still using my fortigate ip public, please help. thank you.. 

 

 

    3 replies

    marchand
    New Member
    March 5, 2021

    A solution to your problem would be to use 2 network interfaces in your server .On one of the interfaces you will receive traffic from your VIP interface and the second interface set as default gateway for your server .

    emnoc
    New Member
    March 5, 2021

    That's what I would not do. No need for it.

     

    OP, what is the policy(s) that allows the outgoing traffic? Your probably using ip nat enable and egress SNAT. If you want that host to send traffic with the same VIP ext-ip, just build a IP nat pool and enable NAT in the related policy and select that nat-pool.

     

    Ken Felix

    verOOnly
    verOOnlyAuthor
    New Member
    March 8, 2021

    emnoc wrote:

    That's what I would not do. No need for it.

     

    OP, what is the policy(s) that allows the outgoing traffic? Your probably using ip nat enable and egress SNAT. If you want that host to send traffic with the same VIP ext-ip, just build a IP nat pool and enable NAT in the related policy and select that nat-pool.

     

    Ken Felix

    I did but still not working.

    my policy is like this :

    Incoming Interface : any

    Outgoing Interface : InternetPool Source : Address Name (Addresses)  Destination : All Schedule : always Service : ALL NAT : Enabled IP Pool Configuration : Using Dynamic IP Pool (is OverLoad or One-to-One) and ARP Replay is Enabled

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT