Skip to main content
Umesh
Explorer II
September 13, 2022
Question

Secondary IP on WAN interface

  • September 13, 2022
  • 2 replies
  • 9361 views

Hi All,

 

I have been trying to understand it for last few days, why do we configure secondary IP address on FortiGate firewall's wan interface.

But I couldn't understand it clearly till now, are there anybody can make me understand it thoroughly .

with an example .

 

Thank you in advanced.

 

 

 

2 replies

Shilpa1
Staff
Staff
September 13, 2022

Hello Umesh,


I hope the below document link helps:

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/915482/secondary-ip-addresses-to-an-interface

Regards,
Shilpa C.P

Umesh
UmeshAuthor
Explorer II
September 13, 2022

Hi,

I would like to tell you, have gone through this document but exactly couldn't understand use of secondary IP address on wan interface.

rosatechnocrat
Explorer III
September 13, 2022

Dear Umesh,

 

The easy way on understanding or usage of secondary IP. 

 

1> There may not be enough host addresses for a particular network segment. For example, your subnetting allows up to 254 hosts per logical subnet, but on one physical subnet you need to have 300 host addresses. Using secondary IP addresses on the routers or access servers allows you to have two logical subnets using one physical subnet.

 

2> 

  • Two subnets of a single network might otherwise be separated by another network. This situation is not permitted when subnets are in use. In these instances, the first network is extended, or layered on top of the second network using secondary addresses.

Also this helps in case of Public subnets owned by organization rather than ISP ( using secondary IP address you can use them directly bu using secondary IP

 

Hope You will understand the point. 

 

Subscribe "ROSA Technocrat" on Youtube for Fortinet Videos and Troubleshooting https://www.youtube.com/@rosatechnocrat