Internet Provider gave us , these informations "like" that :
Private IP on Vlan : 10.1.1.2
Gateway : 10.1.1.1
Public IP : 126.96.36.199
For now , I am able to get access to the router from outside when :
On WAN1, I created a VLAN int for the Private IP
Add a route : 0.0.0.0.0/0 > 10.1.1.1
On WAN1 , I have tried two thing , create a vlan int with Public IP or a loopback with the IP Public too
For the Policy for now , I let Any to Any > ACCEPT
I also able to create a VPN between this router and another forti on another site , this is only working when I select the interface with the Public IP
Another thing working, is the ping only when I'm using the command : exe ping-options source 188.8.131.52
before trying to ping 184.108.40.206 for example
I have for now , no computer connected on local network. I am doing my test only from the web interface or CLI of the router
What do I need to do to not have to specify the source ping-option and enable Internet access for all and from the Router Interface or CLI
Just a small tip: the default route should point to the next hop, 10.1.1.2. The other address will work as well, as ICMP will redirect it.
I d'ont really understand
10.1.1.2 is my Private IP given by ISP.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.