Problem with router Huawei

[hichem1]

Hi all, 

I am fassing a problem with the new router ho is from my ISP that I can setupmode bridge, I have a lot of pertubation in my connexion

Any one have the same problem, any suggestion

[akumar02]

Hello hichem,
You can use the following link to setup your Huawei Router in bridge mode.
https://consumer.huawei.com/ca/support/content/en-us15806362/

Are you not getting IP on Fortigate WAN interface form your router or router itself has issues with the ISP?

You can try to connect the Fortigate directly to the ISP and see if that fixes your issue.

Can you also show your topology here?

[hichem1]

Hello akumar02;

Thanks for your support, but the router is blocked by my ISP, so I don't have access to setup it in bridge mode, the IP is getting from the router.

Best regards,

[akumar02]

Hello Hichem1,

I think in that case you need to talk to ISP. Kindly let us know if you have any questions about Fortinet products. We will be happy to answer. 

[hichem1]

Hello akumar02,

I talked with the ISP,and they said it's impossible to give me access to bridge mode.

Best regards

[ede_pfau]

If you have disconnections or slow speed etc. on your internet connection, that is a request to your ISP.

If you only want to reliably connect FGT and router, use a (small) transfer network like this:

1. think of a private address range which is not used on your network

example: 10.111.222.0/30

yielding 2 usable IPs, 10.111.222.1 and 10.111.222.2

2. Assuming your FGT is connected to the router via port "wan1". Assign the static IP address 10.111.222.1 to "wan1". Assign 10.111.222.2 to the port on your router.

3. on the FGT, create a static route for destination "0.0.0.0/0", with gateway 10.111.222.2 (your router).

4. create a policy on the FGT from LAN to "wan1", be sure to enable NAT.

You now should be able to ping some server on the internet:

ping -t 1.1.1.1

You can now judge how stable your connection is by looking at the ping losses. There shouldn't be any, or at least only a few within a day.

You can show that output to your ISP for proof.

This setup has the disadvantage that the WAN port will not be assigned a public IP address. You will notice that the FGT will nonetheless show your WAN IP on the dashboard. It is because it's querying a server on the internet to report the source address (nice new feature).

[hichem1]

Hello ede_pfau

As you explained, I have used the same architecture. The router's IP address is 192.168.100.1 and WAN1's IP address is 192.168.100.3, configured with policies and static routes. However, from time to time, I encounter connection problems and have to reboot the router manually.

[ede_pfau]

Well, that points to the router a lot, doesn't it? I'd collect longterm ping statistics and open a call with the ISP. If the router locks up after a couple of days then it needs to be replaced.

No FGT topic though.