Access Server on WAN Subnet but not behind Fortigate

[schwarzh]

Hello togehter,

we have a Fortigate 200D running on a bussines SDSL.

On this line we got a range of 8 IPs from the provider but we have to share this IP range with another company

Our Problem is that we are not able to access the Webserver from Company B from LAN side our the Fortigate.

We are able to connect from the WAN to the Webserver of Company B

We are able to connect from the WAN to the Server of Company A

We are not able to connect from LAN to the Webserver of Company B

see JPG

Our IP Range on the WAN side

IP            Mask                   Notes ... 1.2.3.176 255.255.255.248 Subnet Address 1.2.3.177 255.255.255.248 router Provider 1.2.3.178 255.255.255.248 not in use 1.2.3.179 255.255.255.248 Webserver with Public IP from Company B 1.2.3.180 255.255.255.248 not in use 1.2.3.181 255.255.255.248 Fortigate Company A 1.2.3.182 255.255.255.248 Server behind Fortigate for Company A 1.2.3.183 255.255.255.248 Broadcast Address

We are not able to use the Fortigate for both companys

The Other Company has it´s own Firewall and are not willing to share their Firewall

also we are not willing to share our Firwall with them.

Is there a way to provide Access from the LAN to the Webserver of Company B ?

Regards

Holger

[ede_pfau]

There are several possible reasons for this:

1. the netmask of the WAN IP address on your FGT is incorrect, like .179/30.

2. same for the other WAN IP .181

3. the other firewall is blocking traffic from the WAN subnet except for the provider's router

4. the webserver does not respond to PING

Easy to debug from the FGT, and possibly with the help of the other firewall. If you don't know all unknowns it'll be tough.