hi guys, my office just got a new unifi internet plan with 1 fixed ip. the devices given is modem/btu - router - router wifi mesh.
im trying to setup a new fortinet 80f with with unifi. currently my setup is router and router wifi mesh turned off. from modem/btu plugged to wan1
of fortinet. inside fortinet im doing pppoe connection with vlan id 500. Internet successfully connected and working.. but.. im having issue with
my ipsec vpn tunnel. its not working. im looking for an alternate way that i can give my fortigate wan1 the public ip purchased from unifi without using pppoe.

i found this thread that seems to be using another way to get the public ip assigned to a device.
link here link

the summary of the thread is

Static PPPoE

Dual Lan Enable

Username: name@unifi.biz
Password: xxxxxxxx

IP Unnumbered Address: 175.189.157.221
IP Unnumbered netmask: 255.255.255.252
Lan Start IP: 175.189.157.222
Lan End IP: 175.189.157.222

Second device.

Static IP Address: 175.189.157.222
Submask: 255.255.255.252
Gateway: 175.189.157.221

im guessing this setup is done at the router and not the modem/btu. Can i do this kind of setup at the unifi router and assign the fixed ip manually to my fortinet wan1?
will my fortinet with the fixed ip set manually will face the internet directly or the traffic will be filtered at the router with firewall and other stuff on router?

Please advise. thank you.

This post has been edited by zambria: Feb 9 2023, 02:57 PM

your phone connection on UNO?
can try vlan 500 on fgt

This post has been edited by csneo: Feb 9 2023, 02:47 PM

my phone connection? whats UNO?
yes if use pppoe with vlan id 500 works. internet is up. only issue with ipsec vpn tunnel. ( not looking to troubleshoot this yet) but looking for an alternate way
to get the public ip assigned to fortigate without doing the pppoe connection.

IPsec vpn is site by site or user dial in?

It's site to site IPsec VPN sir.

can setup under Fortigate for site to site VPN.
My end is VPN user dial in, and fixed ip using vlan500