My ISP supplies 2 static IP addresses on the same Cat5e cable running for the demarc to the firewall. How can I split those IP addresses so I have one as my main network and the other as a lab IP address?
If they're in one subnet and the GW is in the subnet, I would put one of them on the wan interface then use another one with an ippool so that a specific internal interface/subnet can use the second IP as the NAT outside IP with a specific policy above the default outgoing policy, which would use the interface IP.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1742 | |
1113 | |
759 | |
447 | |
241 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.