Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
kcerb
New Contributor III

How to change outgoing IP address?

Hello, I have 5 external IP`s addresses from my ISP. I added those addresses to WAN1 interface. I have several servers in DMZ (e.g. mail server), whose services are accessible from the outside. I created the appropriate VIP addresses and traffic from Internet to DMZ goes to the correct servers. But all the servers from DMZ and LAN internet users go from one address (primary WAN1 address). How can I set different external IP address for outgoing servers traffic?

FGT60B, FGT100A, FGT100D

FGT60B, FGT100A, FGT100D
1 Solution
tturba
New Contributor III

rwpatterson wrote:

This may happen if you set the IP address as the main IP address on the interface. There really is no need to do that, just check off the NAT option and you're done.

 

OmG it is working! Whoa, that was amazing.

 

Thank you very much and regards!

View solution in original post

7 REPLIES 7
kcerb
New Contributor III

I was looking poorly... :) HERE is the solution.

FGT60B, FGT100A, FGT100D

FGT60B, FGT100A, FGT100D
rwpatterson
Valued Contributor III

If your VIP does not use port mapping, then the server will answer on the same IP address that' s set up in the VIP. With port mapping, you will have to use an IP pool to return traffic with the same IP address.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
kcerb
New Contributor III

Thanks, I used an IP pool because in VIP I have set a port.

FGT60B, FGT100A, FGT100D

FGT60B, FGT100A, FGT100D
tturba
New Contributor III

kcerb wrote:
Thanks, I used an IP pool because in VIP I have set a port.
Have you had an issue with network connection going down when you have set up the IP pool overload one IP address?

When I create it, it the server internet connection goes down.

rwpatterson
Valued Contributor III

This may happen if you set the IP address as the main IP address on the interface. There really is no need to do that, just check off the NAT option and you're done.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
tturba
New Contributor III

rwpatterson wrote:

This may happen if you set the IP address as the main IP address on the interface. There really is no need to do that, just check off the NAT option and you're done.

 

OmG it is working! Whoa, that was amazing.

 

Thank you very much and regards!

rwpatterson
Valued Contributor III

No problem. Been there, done that, and have handfuls of hair to prove it. Mark the post, since it helped. That way others will know that the info was good.

 

Bob

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
Labels
Top Kudoed Authors