I need to configure with FortiManager script IPSec tunnel interface IP. For that I need to use a calculated value.
I have a meta with router IP, for example my meta is ROUTER_IP = 10.18.3.1. I wanted to "transform" this to 172.16.18.3. What I need is octet 2 and 3.
With meta calculation is it possible to "null" an octet ? For example doing something like that :
It seem it's not possible...
Si if now, is it possible to use an "public" IP on tunnel interfaces, for example 220.127.116.11, so in this case I just need to add 100 on first octet.
Thanks for your help
I don't think you can move those "byte"s around like [byte2].[byte1].[byte4].[byte3], or in your case, 172.16.[byte2].[byte3]. Only action allowed is within each byte based on the spec:Syntaxcommand... $(metafield:byte1,action:byte2,action:byte3,action:byte4,action)
For no action to the byte, you can simply skip it like $(metafield:3,+1:4,-1), etc. I would say it's a new feature request. But wait for an official answer from FTNT.
Thanks for your return. So should I put "public" IPs on my VPN tunnel ? Something like 18.104.22.168 ? Or is it definitively not recommended.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.