We have applied the Internet plan from PCCW with 8 IPs. They provide IP configuration as follows:
Client WAN IP address: 172.21.106.2
WAN IP address gateway: 172.21.106.1
Public LAN IP address: 223.197.45.232-239
I'm failed to setup my Fortinet 60E to access the Internet. Please help.
Kenneth
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
This is all guessing based on your information provided.
Your WAN Interface IP (based on what I'm seeing) should be 172.21.106.2/31 (maybe it's /30). Your default gateway should be 172.21.106.1. You can then use NAT rules or virtual IPs to utilize the public ip addresses for outgoing traffic, depending on what your goal is.
Dear djaquays,
Actually I use the IP address of 172.21.106.2 with Default Gateway 172.21.106.1 on the Fortinet 60E, but I failed to connect to Internet. I can ping 172.21.106.1 which I think the IP is the Fibre Optic router from PCCW. Please kindly advise that I cannot even connect to the Internet.
Kenneth
Kenneth,
You'll need to provide some more information.
1) Did you add a default gateway route? (0.0.0.0/0 to 172.21.106.2)
2) How are you trying to determine that you are "connected to the Internet"
3) What service is this firewall/connection providing? Is it Internet service for users? Is it hosting services (web/dns/whatever)?
4) Are there any other pieces of networking equipment involved?
Dear Dyaquays,
Please kindly find the following information.
1) Did you add a default gateway route? (0.0.0.0/0 to 172.21.106.2)
Yes. The default gateway route IP:172.21.106.1 added already. 2) How are you trying to determine that you are "connected to the Internet"
I can ping the DG:172.21.106.1, but unable to ping the DNS IP address on the 60E Firewall. 3) What service is this firewall/connection providing? Is it Internet service for users? Is it hosting services (web/dns/whatever)?
The Internet line from PCCW is major for Internet service (Around 30 users) 4) Are there any other pieces of networking equipment involved?
There is only a Fibre Router from the ISP, PCCW, in front of the 60E Firewall.
Regards,
Kenneth
HI,
1. Can you check with ISP and share you WAN mac address to them allow the internet access.
2. Run debug .
Regards,
Sudarsan Babu P
Regards,
Sudarsan Babu P
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.