Public ip to gast lan

[jd653687]

Hi, I am new with Fortigate. Fine product. But I have the follow challange.

I have 8 public ip addresses and one to assigen one public address to a guest lan.

Should I use Vdom's? What is the best way to accomplish this? using a Foritgate 100D

Thanks in advance.

[ede_pfau · Accepted solution]

hi,

what you want to do is to change the source address of your WiFi hosts. This can be done with source NAT.

Source NAT in FortiOS is configured with 'IP pools' (firewall objects).

Step by step:

1- create a new IP pool with just one public address, e.g. '1.2.3.4 - 1.2.3.4'

2- create/modify a policy from 'SSID' to 'WAN', source address 'myWiFiclients', destination addr 'all', check NAT, check 'use dynamic pool', select the IP pool just created

3- in order to make the FGT react to that public IP, define it as a secondary IP on the WAN interface.

That's all.

[jd653687]

Great Ede, this is working just fine.

Thanks

Jan