Router/NAT mode without using NAT

[Frizz]

I am new to the Foritgate systems. We just purchased a 240D. Is it possible run our 240D in the Router/NAT mode without doing NAT? I can' t get my unit to route properly unless I use NAT.

[Dave_Hall]

Hi Frizz. Welcome to the forums. It would help us if you can provided more details or a topology on your network and what type of ISP equipment (DSL/cable/other, routable public or NATted IP) that the 240D is connecting to...e.g. what are you trying to ultimately accomplish here.

[Frizz]

Current Configuration WAN | CISCO Catalyst 3560G 205.119.32.225/29 | 205.119.32.226/29 Juniper 240SRX 205.119.115.193/29 | 205.119.115.195/29 CISCO Catalyst 3750G | | | | | | | | | | | | 10 Different CISCO routers connecting private network addresses We intend to replace the Juniper 240X with the Fortigate 240D I just can' t get the 240D to route properly.

[Frizz]

Hey, I think I figured it out. I went to Policy & Objects >> IPV4 and edited both the inside and outside Policies to turn off NAT. If the routing is correct in the Router >> Static Routes on both interfaces it works. Sorry that I' m a newbie at this device.

[emnoc]

Good and yes you don' t need NAT on a route-nat vdom. Btw the SRX240 is great mid-branch firewall. Routing should not been an issue on these and the fortigate is almost about the same when compared to the SRX series.