IP block forwarding from ISP
I know that am not the first asking a similar question, but I' ve gone through the posts and still don' t fully get it.
So here is our situation. On our primary WAN interface (we have dual-ISP connections) we have a " standard" /26 public IP block with the FG' s and ISP' s upstream router' s IP addresses being the part of this block.
We are contemplating idea now to switch primary WAN connection to a different ISP. The " new" ISP provides public IP addresses differently. Instead of assigning one single IP block to a client they provide main IP block (/30) strictly for client' s and IPS' s routers communication and then forward the second IP block containing the bulk of IP addresses to the client' s firewall/router.
What would be the right way of configuring a FG to handle this second IP block? Would it be sufficient to configure just VIPs on that WAN interface or we have to explicitly assign the second IP block to it as well?
Some expert members (ede-pfau here
, emnoc there
, ...) do not recommend setting secondary IPs on a FG' s interface. In what circumstances we have to use secondary IP addresses then?
Also if I need to ensure that some outbound traffic flows through/from specific IP addresses - I use IP pools for that purpose, right? Do I require to assign a secondary IP block in this case or could " get away" without it?
post edited by Admin_FTNT - 2014/10/29 04:34:13