Hello everyone,
I just wanted to make sure if this is going to work:
Our customer has two WAN subnets which are connected to one interface on the FortiGate. Therefore I need two default routes, one to each gateway. The secondary subnet is configured as secondary IP at the wan1 interface. Does the FortiGate know automatically which gateway it should choose? (See the attached images)
Unfortunately I cannot test this yet since it's not installed at the customer's site...
Thank you in advance!
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi,
By default, FortiOS will perform ECMP with such a setup.
Can you please tell me the reason you would like to assign these secondary IP addresses to the wan interface?
Are these IP addresses will be used in SNAT, DNAT?
Ahmad
Hi,
By default, FortiOS will perform ECMP with such a setup.
Can you please tell me the reason you would like to assign these secondary IP addresses to the wan interface?
Are these IP addresses will be used in SNAT, DNAT?
Ahmad
Hi, thanks for the reply!
This is because the previous firewall (Barracuda) had such a setup so I took it and transfered it 1:1 to the FortiGate. I have some VIPs that I guess would work just fine but ECMP of course is not what I want. So I guess I will use two seperate interfaces for the two subnets and use SD-WAN instead...
Benedikt
Not sure how Barracuda does work, but on FortiOS If these IP addresses will be used for SNAT/DNAT, there is no need to "host" them on the wan interface.
Ahmad
You should dig into Barracuda config further to understand why it was configured that way. My instant guess is one of them was an old one and a secondary IP was used for transition, then it was never removed after it's completed. Means one of them might not be working now. You might need to talk to your ISP to figure it out.
Toshi
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1692 | |
1087 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.