VDSL ISP modem connection to FortiGate 90E

[CodeTron]

Dears,

What is the best way to connect a TP-Link 1600 VDSL ISP router to a FG90E

I want to use the FG for VPN, DHCP and other policies. the ISP router is providing a nated IP 192.168.0.x

I tried connecting a wire from the router to WAN1 port after disabling DHCP on the router and set a static IP on the WAN port, is this the way to go or I should be doing something else? I read posts saying that I should be changing the connection mode to bridge. what is your recommendation 

Thank you in advance  

[abarushka · Accepted solution]

Hello,

In case you may consider to switch TP-Link 1600 VDSL ISP router to bridge mode in order to simplify configuration (i.e. no need to configure port forwarding for VPN).

[abarushka · Accepted solution]

Hello,

In case you may consider to switch TP-Link 1600 VDSL ISP router to bridge mode in order to simplify configuration (i.e. no need to configure port forwarding for VPN).

[AEK · Accepted solution]

Hello

What you did should work correctly, but as mentioned by @abarushka bridge mode is better because:

• You will manage NAT at FG level which is much more flexible
• I think it should be more secure since the public IP is on FG, which is certainly much more secure than a VDSL modem