Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Rahuls
New Contributor

Created on ‎04-27-2017 07:23 AM

Using secondary IP for VPN termination

Hi,

We have two different 600C firewall clusters at 2 locations with different internet links.

Now, my query is can I have same secondary IP on both the firewall's WAN interface while primary IPs being unique on individual units.

 

Can anyone advise on this whether thisis going to work?

 

Regards,

Rahul

3213
0 Kudos
2 REPLIES 2
EMES
Contributor

Created on ‎05-04-2017 05:48 AM

The firewalls will allow you to do it but because they secondary aren't unique traffic will not route properly.
1152
0 Kudos
ede_pfau
SuperUser
SuperUser
In response to EMES

Created on ‎05-04-2017 06:37 AM

Strange question. Why would you want this?

And I agree, if you terminate the VPN on the identical secondary IP, how would the FGT know which of the 2 identical addresses you mean - the local or the remote one?

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
1152
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.