config system interface edit wan1 set secondary-IP enable config secondaryip edit 1 set ip 220.127.116.11 255.255.255.248 set allowaccess ping next edit 2 set ip 10.10.20.20 255.255.255.248 set allowaccess https next end next end
1- while entering addresses, type "edit 0" to create the next available ID.
2- with "set ip", you can enter an IP with netmask like this: "set ip 18.104.22.168/29"
3- secondary addresses will respond to arp requests
You can use secondary (and in turn tertiary etc ) IPs on the interface as mentioned above or you can use EMAC VLANs to throw multiples on it as well. EMAC basically stands up another virtual interface running an IP on the same physical interface though so may be overkill for what you are doing. The built in secondary IP area should suffice.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.