Skip to main content
DjfLoYd
DjfLoYd
New Member
May 30, 2016
Question

VIPs not working over pppoe connection

  • May 30, 2016
  • 1 reply
  • 6319 views

Hi ladies and gents

 

I've got a Fortigate 90D (5.4 Build 1011 in interface mode and doing NAT) with two wan connections. One is fibre (wan1) with a small range of public IPs and the other is an ADSL/pppoe backup connection (wan2). I've setup failover between the two wan ports and it works great. Wan2 is configured as a pppoe port with the ADSL router in bridge mode.

 

On the primary interface (wan1) I have a few public IPs that I forward to various internal servers via VIPs and port forwarding. I want to have a similar setup for when the link fails to the adsl connection (which has one dynamic IP). 

 

So I created new VIPs that reference wan2 and I use the public IP that is currently assigned by the service provider.

(no place for a FQDN it seems so it will break once the IP changes but I'll worry about that later).

 

None of the VIPs work even though I've created a new VIP and assigned a policy to it and the wan2 interface.

I'm new to Fortigate so I would not be surprised if I missed something obvious, has anyone managed to get

VIPs working over a pppoe connection. Any advice on where to look etc.

 

Your help is greatly appreciated.

 

Cheers

    1 reply

    DjfLoYd
    DjfLoYdAuthor
    New Member
    May 31, 2016

    Hi

     

    Thanks for the response. 

    Minutes after posting this thread I had a light bulb moment and found my mistake. It now works.

     

    My mistake was configuring the external IP on the VIP config. The VIP is already bound to

    wan2 but for some sleepy reason I was thinking I needed to put my dynamic public IP in here. But

    what that actually does is limit the VIP to only forward traffic received from that IP (which in theory would

    never happen). At least that is what made sense to me. :)

     

    edit "BACKUP_EXCHANGE"

    set uuid 4xxxxxxx-2xxx-5xxx-2xxx-1xxxxxxxxxxx set comment "Exchange access via backup link" set extip 169.x.x.x   <------------------------- this should be 0.0.0.0  set extintf "wan2" set portforward enable set mappedip "10.x.x.x" set extport 443 set mappedport 443 next

    Terms & ConditionsAccessibility statement