Routing between different classes on internal interface

[metissnc]

Hi, I' ve a Fortigate 100A with OS 3.0 MR2. I would config two IP address of two different network classes on internal interface and make routing between the classes. How can I obtain this? Many thx.

[Fireshield]

You can do this one of 2 ways. Either make a subinterface (VLAN interface) for the 2nd network or you can just create a secondary IP on that interface and make firewall policies between the 2. To create a secondary IP address use the following commands: conf sys int edit <interface name> conf secondaryip edit 0 ::(this will make a new entry) set ip x.x.x.x y.y.y.y (x is IP, y is mask) next end