Skip to main content
andreagx
New Member
August 6, 2021
Question

SNAT do not work

  • August 6, 2021
  • 1 reply
  • 2264 views

Hello, 

I'm using FortiOS 7.

 

I need a rule that do this: 

2 source server with ip1 and ip2

2 public ip, Pub1 and Pub2 

I need the two servers ip1 e ip2 go in internet with Pub2 (not the default) 

So I made a SNAT rule like the below, but do not work. What's wrong?  

 

 

config firewall policy set name "LAB2 SNAT" set uuid cda48efe-f6c6-51eb-2f52-56f13adb9039 set srcintf "internal" set dstintf "wan1" set srcaddr "Ip1-Ip2" set dstaddr "all" set action accept set schedule "always" set service "ALL" set logtraffic all set nat enable set ippool enable set poolname "PUB2" next end

    1 reply

    abarushka
    Staff
    Staff
    April 20, 2022

    Hello,

     

    Configuration looks good. I would recommend to verify by collecting debug flow output whether firewall policy is hit.

     

    https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-First-steps-to-troubleshoot-connectivity/ta-p/192560