Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
as you say, create the VIP (and firewall rule which uses the VIP) is al you need to do if the provider routes these to the link
VIPs on themselves don't do much, using them as destination in a firewall rule from wan to internal zone is required.
as for the PPPoE numbered IP i don't get the question, screenshot might help.
OP, you don't have to fill in any IP address in the PPPoE setup. If so, your ISP would tell you. This has nothing to do with the block of public IPs you were assigned.
You have 2 ways to use the public IPs:
- as secondary addresses on your WAN port
- as VIPs, that is, using destination NAT
The first way does not apply if you use PPPoE because then the primary address is assigned dynamically. You will have a hard time to put in the other addresses then.
VIPs actually do something right after creation (that is, even WITHOUT using them in a policy): they respond to arp, they are 'seen' on the WAN port. But, to actually make use of them, you need to use them as the destination address in an inbound policy, as @boneyard has already explained.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1733 | |
1106 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.