| Description |
This article describes how to add one IP in a One-to-One IP Pool. |
| Scope | FortiGate. |
| Solution |
When using a One-to-One IP Pool, it is required to enter the range of IPs. Sometimes there might be occasions where the mapped IP address needs to be just one IP.
For example: In the above screenshot, when one adds just one IP is considered as invalid.
Other similar scenarios where IP will be considered as invalid:
10.10.10.10/32 10.10.10.10 255.255.255.255
The right approach would be:
From CLI:
config firewall ippool edit "DMZ SNAT" set type one-to-one set startip 10.10.10.10 set endip 10.10.10.10 next end
From GUI:
This will ensure that the mapping will consist of only one IP and also in a valid format.
As this is valid, it can be used in Firewall policy as NAT with ‘Use Dynamic IP Pool’ and selecting the IP Pool just created.
|
