SD-WAN with IP Pools

[lone]

Hi,

I want our mail server to go out with special IP.

I apply the IP Pools to the SD-WAN but it cause the outside traffic broken.

How can I special the IP with SD-WAN?

Lone

[Philippe_Gagne]

Hi,

In 5.6.3, you have to associate the IPPool to an interface. This way, the IP from the WAN#2 will not be used on WAN#1. 

config firewall ippool

edit "WAN1 IPPool name"

 set associated-interface wan1

next

edit "WAN2 IPPool name"

 set associated-interface wan2

next

end

After this modification, on the IPv4 Policy, you can use both IPPool in the same rule. To force your mail server to exit only on WAN1, just create a SD-Wan rule to force the traffic on the SD-Wan member you want! 

I alway ready done this few times, it works really really fine! :)

Let me know if it works for you too! 

Philippe

[lone]

Hi Philippe,

It work for me. Thank you.

But I find it will always use the same IP of the IP Pools.

The IP Pools have four IPs. Will you do this?

[Philippe_Gagne]

Good!

For the IPPool, if you want your server to use only a specific IP, use a IPPool with a single IP. A IPPool with more than one IP, in my mind, when you have a large network to avoid port exhaustion. 

Good job! 

Philippe