ip pool NAT

[live89]

Hi Is there a way to exclude one ip address from NAT IP pool ? Today I'm splitting the ip pool into two pools and then attach them to the policy ... this is frustrating .. because sometimes I need to exclude more than one IP it would be nice to have this feature

[ede_pfau]

Is this a question or a feature request? IMHO you're doing it already the way it's got to be.

The next feature request would be to be also able to negate the IP range...

[live89]

Hi @ede_pfau

Thanks for the response

The way I'm doing it today is frustrating, because sometimes I need to exclude more than one IP, and for that I'm splitting the ip pool into more than two ip pools.

And also I'm not pretty sure about how the Fortigate behave when splitting ip pool into more than one , I mean how it behaves with load balancing the source ip addresses with the NAT overload

is it using equally both ip pools ? is it using the multiple ip pool from top to down in the fwpolicies ?

[ede_pfau]

AFAIR pools are used until exhausted, that is, first pool, then next.