Secondary IP on WAN interface

[Umesh]

Hi All,

I have been trying to understand it for last few days, why do we configure secondary IP address on FortiGate firewall's wan interface.

But I couldn't understand it clearly till now, are there anybody can make me understand it thoroughly .

with an example .

Thank you in advanced.

[Shilpa1]

Hello Umesh,

I hope the below document link helps:

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/915482/secondary-ip-addresses-to-an-inte...

Regards,
Shilpa C.P

[Umesh]

Hi,

I would like to tell you, have gone through this document but exactly couldn't understand use of secondary IP address on wan interface.

[rosatechnocrat]

Dear Umesh,

The easy way on understanding or usage of secondary IP. 

1> There may not be enough host addresses for a particular network segment. For example, your subnetting allows up to 254 hosts per logical subnet, but on one physical subnet you need to have 300 host addresses. Using secondary IP addresses on the routers or access servers allows you to have two logical subnets using one physical subnet.

2> 

• Two subnets of a single network might otherwise be separated by another network. This situation is not permitted when subnets are in use. In these instances, the first network is extended, or layered on top of the second network using secondary addresses.

Also this helps in case of Public subnets owned by organization rather than ISP ( using secondary IP address you can use them directly bu using secondary IP

Hope You will understand the point.