Skip to main content
danfor443
New Member
July 8, 2020
Question

WAN IP Unknown

  • July 8, 2020
  • 7 replies
  • 35501 views

Hello everyone,

 

on "Dashboard -> System Information" it says "WAN IP - Unknown".

 

Do you know this issue?

Do i have to allow specific ports / Settings on WAN1?

 

The Firewall is a Fortigate 100E with Version 6.0.9 Build 0335 (GA).

 

 

I found something where people could "solve" this problem with 'diagnose sys waninfo' or 'diagnose sys waninfo ipify'.

But i is not working for me.

 

I can't see any denies on "Diag sniffer packet" or "syslog".

 

 

 

**********************************************************************

# diagnose sys waninfo Failed to get my public IP, ret=0 src_ip=0.0.0.0 vfid=-1(null) Command fail. Return code 5

**********************************************************************

 

 

********************************************************************** # diagnose sys waninfo ipify Try to get my public IP through [link]https://api.ipify.org[/link] with src_ip=0.0.0.0 vfid=0(root) ... Failed to get my public IP, ret=-1 src_ip=0.0.0.0 vfid=0(root) Command fail. Return code 5 **********************************************************************

 

 

Best Regards,

Danfor

    7 replies

    Toshi_Esumi
    SuperUser
    SuperUser
    July 8, 2020

    That's just a command to check what IP it's using to go out to the internet, equivalent to type "what's my ip" in Google search. It wouldn't fix the problem you have. You basically don't have internet. That's what it means.

    Check the WAN1 interface config under Network->Interface if it's matching ISP's or upstream router's setting, like DHCP or PPPoE. If everything is correct, then you need to call your ISP or whoever manage the upstream router.

    emnoc
    New Member
    July 8, 2020

    FWIW, and if not obvious your  wan-ip needs to be public and in the geo-db to begin with. So just want to point that out. I would  find my public address and check a geoip source and then trouble shoot. If your using api.ipify.org, you can diagsniffer and see if it's connecting to the API interface if the request fails, than you need to trouble connectivity.

     

     

    Ken Felix

    danfor443
    danfor443Author
    New Member
    July 10, 2020

    Hello,

     

    "It wouldn't fix the problem you have" -> you're right. Just mentioned it because some people did this as "helpful workaround".

     

    "You basically don't have internet" -> Thats the point. Internet connection works. I have a working Site2Site-VPN and a working traffic flow to the internet and vice versa.

     

    What i forgot to mention: This WAN1 Interface has a public IP. It has a straight Link to the Internet.

     

    That means, as far as i can see everything works fine, but it says "WAN IP unknown".

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT