Skip to main content
mcdaniels
New Member
January 22, 2020
Question

Transparent mode WAN and LAN on same network

  • January 22, 2020
  • 0 replies
  • 1658 views

Hi folks,

perhaps this is some kind of a strange question:

 

If I had a LAN-Network which is connected to a FGT in NAT mode and then to a router, finally to the internet, is it possible to use an additional Fortigate in transparent Mode between the LAN and the Fortigate in NAT mode.

 

That way:

 

LAN <-> FGT in transparent mode <-> Fortigate in NAT mode <-> Router <-> Internet?

 

The lan-port of the FGT in transparent mode will get an IP from the local network, thats clear.

But which IP will I have to assign to the WAN-Port of the FGT in transparent mode? Because the LAN and WAN port of the FGT in transparent mode, will be on the same network.

 

LAN 192.168.10.x -> Gateway (=Forti in NAT Mode) = 192.168.10.254

 

So the transparent FGT will be in the 192.168.10.x  network (both interfaces LAN and WAN).

 

Is it possible to do something like this?

 

Edit: In fact, the more I think about it, it can only work that way. (LAYER2)

 

Thanks!

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT