HK PCCW Always On Plan setup on Fortinet 60E

[Kanefu]

We have  applied the Internet plan from PCCW with 8 IPs. They provide IP configuration as follows:

Client WAN IP address: 172.21.106.2

WAN IP address gateway: 172.21.106.1

Public LAN IP address: 223.197.45.232－239

I'm failed to setup my Fortinet 60E to access the Internet. Please help.

Kenneth

[djaquays]

This is all guessing based on your information provided.

Your WAN Interface IP  (based on what I'm seeing) should be 172.21.106.2/31 (maybe it's /30).  Your default gateway should be 172.21.106.1.  You can then use NAT rules or virtual IPs to utilize the public ip addresses for outgoing traffic, depending on what your goal is.

[Kanefu]

Dear djaquays,

Actually I use the IP address of 172.21.106.2 with Default Gateway 172.21.106.1 on the Fortinet 60E, but I failed to connect to Internet. I can ping 172.21.106.1 which I think the IP is the Fibre Optic router from PCCW. Please kindly advise that I cannot even connect to the Internet.

Kenneth

[djaquays]

Kenneth,

  You'll need to provide some more information.

1) Did you add a default gateway route? (0.0.0.0/0 to 172.21.106.2)

2) How are you trying to determine that you are "connected to the Internet"

3) What service is this firewall/connection providing?  Is it Internet service for users?  Is it hosting services (web/dns/whatever)?

4) Are there any other pieces of networking equipment involved?

[Kanefu]

Dear Dyaquays,

Please kindly find the following information. 

1) Did you add a default gateway route? (0.0.0.0/0 to 172.21.106.2) 

Yes. The default gateway route IP:172.21.106.1 added already. 2) How are you trying to determine that you are "connected to the Internet"

I can ping the DG:172.21.106.1, but unable to ping the DNS IP address on the 60E Firewall. 3) What service is this firewall/connection providing?  Is it Internet service for users?  Is it hosting services (web/dns/whatever)?

The Internet line from PCCW is major for Internet service (Around 30 users) 4) Are there any other pieces of networking equipment involved?

There is only a Fibre Router from the ISP, PCCW, in front of the 60E Firewall. 

Regards,

Kenneth

[Sudarsan_Babu]

HI,

1. Can you check with ISP and share you WAN mac address to them allow the internet access. 

2. Run debug . 

Regards,

Sudarsan Babu P