获取接口对应的公网 IP

1. 当 FortiGate 的 WAN 接口（配置私网 IP）位于 Internet 设备（针对 FortiGate 的 WAN 接口做 SNAT）后时，可以通过如下 CLI 命令获取 WAN 接口对应的公网 IP。

   重要

   该 CLI 命令需要 FortiGate 可以正常解析并访问https://api.ipify.org。

   diagnose sys waninfo ipify

2. 如下所示：

   FortiGate # diagnose sys waninfo ipify
   Try to get my public IP through https://api.ipify.org with src_ip=0.0.0.0 device=unspecified vfid=0(root) ...
   
   Public/WAN IP: 60.247.121.226
   Location: 
           Latitude: 39.904202
           Longitude: 116.407402
           Accuracy radius: Unknown
           Time zone: Asia/Shanghai
   City: Beijing
   Subdivisions: 
           0: Beijing
   Country: China
   Postal: Unknown
           Code: Unknown
   Continent: Asia
   Registered country: Unknown
   ISP: Unknown

3. 如果存在多个 WAN 接口连接，需要获取特定 WAN 接口对应的公网 IP，请使用如下 CLI 命令，指定要获取对应公网 IP 的接口，或使用接口私网 IP 作为源 IP 去获取对应的公网 IP。

   diagnose sys waninfo ipify <interface_name> ｜ <source_IP_address>

4. 如下所示：

   FortiGate # diagnose sys waninfo ipify wan
   Try to get my public IP through https://api.ipify.org with src_ip=0.0.0.0 device=wan vfid=0(root) ...
   
   Public/WAN IP: 45.62.167.221
   Location: 
           Latitude: 22.278320
           Longitude: 114.174690
           Accuracy radius: Unknown
           Time zone: Asia/Hong_Kong
   City: Hong Kong
   Subdivisions: 
           0: Hong Kong
   Country/Zone: Hong Kong
   Postal: Unknown
           Code: Unknown
   Continent: Asia
   Registered country: Unknown
   ISP: Unknown

   FortiGate # diagnose sys waninfo ipify 192.168.123.175
   Try to get my public IP through https://api.ipify.org with src_ip=192.168.123.175 device=unspecified vfid=0(root) ...
   
   Public/WAN IP: 123.112.242.161
   Location: 
           Latitude: 39.904202
           Longitude: 116.407402
           Accuracy radius: Unknown
           Time zone: Asia/Shanghai
   City: Beijing
   Subdivisions: 
           0: Beijing
   Country: China
   Postal: Unknown
           Code: Unknown
   Continent: Asia
   Registered country: Unknown
   ISP: Unknown