Skip to main content
virtualj
New Member
August 16, 2018
Question

Source address option related to an interface and not to specific IP

  • August 16, 2018
  • 1 reply
  • 2661 views

Hi to all,

it should be so usefull if instead of source-ip option we can use source-intf. For big installation with many branch the source-ip is always different and is not scriptable, but it is assigned always to the same interface. For example:

config log fortianalyzer setting

set source-ip port1

end

config system dns

set source-ip wan1

end

config system ntp

set source-ip loopback

end

The source-ip option is very usefull when you have VPN and the fortigate do not choose the correct source-ip to start the connections.

    1 reply

    tanr
    New Member
    August 16, 2018

    I agree being able to specify an interface instead of an ip would be very useful and more flexible.  One of the few things I miss from working with ZyXEL gear.

     

    I would contact your SE or sales rep to pass this on as a feature request.