Hi folks,
is it possible to add a 3rd IP Adress do WAN1 interface. I already have running an secondary IP on WAN1 and would need a 3rd one.
Thanks!
Yes, you can add multiple secondary IPs on a single interface.
Depending on what you're using it for you may need to set up IP Pools or VIP appropriately.
config system interface
edit wan1
set secondary-IP enable
config secondaryip
edit 1
set ip 1.2.3.4 255.255.255.248
set allowaccess ping
next
edit 2
set ip 10.10.20.20 255.255.255.248
set allowaccess https
next
end
next
end
Notes:
1- while entering addresses, type "edit 0" to create the next available ID.
2- with "set ip", you can enter an IP with netmask like this: "set ip 4.4.5.6/29"
3- secondary addresses will respond to arp requests
I don't see why you'd do that... A VIP (NAT) would be the more preferred way. perhaps a little more background as to why you want the third as a sub-interface?
You can use secondary (and in turn tertiary etc ) IPs on the interface as mentioned above or you can use EMAC VLANs to throw multiples on it as well. EMAC basically stands up another virtual interface running an IP on the same physical interface though so may be overkill for what you are doing. The built in secondary IP area should suffice.
Mike Pruett
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.