Description
This article describes how to configure SNAT support for policies with virtual wire pairs.
Solution
Source NAT (SNAT) i configured for IPv4 and IPv6 policies with virtual wire pair (VWP) interfaces.
To configure a policy using SNAT and a virtual wire pair.
Create the virtual wire pair interface.
# config system virtual-wire-pair
edit "test-vw-1"
set member "port1" "port4"
next
end
Create the IP pool. The IP pool must have a different subnet than the VWP peers.
# config firewall ippool
edit "vwp-pool-1"
set startip 172.16.222.99
set endip 172.16.222.100
next
end
Configure the policy.
# config firewall policy
edit 88
set srcintf "port4"
set dstintf "port1"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
set logtraffic all
set ippool enable
set poolname "vwp-pool-1"
set nat enable
next
end
Related link.
https://docs.fortinet.com/document/fortigate/6.4.0/new-features/950123/snat-support-for-policies-wit...
