Fortinet white logo
Fortinet white logo

Azure vWAN SD-WAN NGFW Deployment Guide

7.4.0

Adding additional public IP addresses

Adding additional public IP addresses

You can add an existing Public IP of standard SKU to the Azure vWAN SLB.

For more information about adding public IP addresses and for information about known issues, go to the Microsoft site: https://learn.microsoft.com/en-us/azure/virtual-wan/how-to-network-virtual-appliance-inbound.

To add additional public IP addresses:
  1. 1. On the Azure portal, go to Virtual WANs.

  2. 2. Select your virtual WAN.

  3. 3. Go to Hub > Network Virtual Appliance.

  4. 4. Under the NVA, click Manage configurations > Internet inbound.

  5. 6. Click Add to add the public IP address.

Note

NAT traffic is currently not being forwarded to the NVA after associating an additional IP address because of a Microsoft issue, which is currently being fixed.

Workaround: Use FortiManager or FortiGate CLI to modify (create or delete existing) configured inbound-security rules on pre-existing public IP addresses to restore connectivity.

Adding additional public IP addresses

Adding additional public IP addresses

You can add an existing Public IP of standard SKU to the Azure vWAN SLB.

For more information about adding public IP addresses and for information about known issues, go to the Microsoft site: https://learn.microsoft.com/en-us/azure/virtual-wan/how-to-network-virtual-appliance-inbound.

To add additional public IP addresses:
  1. 1. On the Azure portal, go to Virtual WANs.

  2. 2. Select your virtual WAN.

  3. 3. Go to Hub > Network Virtual Appliance.

  4. 4. Under the NVA, click Manage configurations > Internet inbound.

  5. 6. Click Add to add the public IP address.

Note

NAT traffic is currently not being forwarded to the NVA after associating an additional IP address because of a Microsoft issue, which is currently being fixed.

Workaround: Use FortiManager or FortiGate CLI to modify (create or delete existing) configured inbound-security rules on pre-existing public IP addresses to restore connectivity.