Hi folks,
is it possible to add a 3rd IP Adress do WAN1 interface. I already have running an secondary IP on WAN1 and would need a 3rd one.
Thanks!
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Yes, you can add multiple secondary IPs on a single interface.
Depending on what you're using it for you may need to set up IP Pools or VIP appropriately.
config system interface
edit wan1
set secondary-IP enable
config secondaryip
edit 1
set ip 1.2.3.4 255.255.255.248
set allowaccess ping
next
edit 2
set ip 10.10.20.20 255.255.255.248
set allowaccess https
next
end
next
end
Notes:
1- while entering addresses, type "edit 0" to create the next available ID.
2- with "set ip", you can enter an IP with netmask like this: "set ip 4.4.5.6/29"
3- secondary addresses will respond to arp requests
I don't see why you'd do that... A VIP (NAT) would be the more preferred way. perhaps a little more background as to why you want the third as a sub-interface?
You can use secondary (and in turn tertiary etc ) IPs on the interface as mentioned above or you can use EMAC VLANs to throw multiples on it as well. EMAC basically stands up another virtual interface running an IP on the same physical interface though so may be overkill for what you are doing. The built in secondary IP area should suffice.
Mike Pruett
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1547 | |
1031 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.