Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mcdaniels
New Contributor

Add 3rd IP do WAN Interface

Hi folks,

is it possible to add a 3rd IP Adress do WAN1 interface. I already have running an secondary IP on WAN1 and would need a 3rd one.

 

Thanks!

4 REPLIES 4
tanr
Valued Contributor II

Yes, you can add multiple secondary IPs on a single interface.

 

Depending on what you're using it for you may need to set up IP Pools or VIP appropriately.

ede_pfau

config system interface
   edit wan1
      set secondary-IP enable
      config secondaryip
         edit 1
            set ip 1.2.3.4 255.255.255.248
            set allowaccess ping
         next
         edit 2
            set ip 10.10.20.20 255.255.255.248
            set allowaccess https
         next
      end
   next
end

 

Notes:

1- while entering addresses, type "edit 0" to create the next available ID.

2- with "set ip", you can enter an IP with netmask like this: "set ip 4.4.5.6/29"

3- secondary addresses will respond to arp requests


Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
fcb

I don't see why you'd do that... A VIP (NAT) would be the more preferred way. perhaps a little more background as to why you want the third as a sub-interface?

MikePruett
Valued Contributor

You can use secondary (and in turn tertiary etc ) IPs on the interface as mentioned above or you can use EMAC VLANs to throw multiples on it as well. EMAC basically stands up another virtual interface running an IP on the same physical interface though so may be overkill for what you are doing. The built in secondary IP area should suffice.

Mike Pruett Fortinet GURU | Fortinet Training Videos
Labels
Top Kudoed Authors