Skip to main content
deessing
New Member
July 2, 2021
Question

Secondary IP routing

  • July 2, 2021
  • 1 reply
  • 2254 views

I need a scenario like this where site A FortiGate primary address is used for peer-to-peer link and then use Secondary IP as end tunnel address for site users. Will site B able to reach to Secondary IP address via Primary IP? Do I need to add any special rules here?

 

 

Site A                                                                                                                Site B

 

Primary IP 20.10.10.1/30  <-------------------------------------------------------------> IP 20.10.10.2/30

Secondary IP 30.10.10.1/24                                                                                    Add route to 30.10.10.1 via 20.10.10.1

Tunnel end point 30.10.10.1

    1 reply

    ac1
    Explorer III
    August 27, 2021
    it should work.

    AC
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!