Assistance to allow external access to your IIS server

10 replies
6118 views

Hi,

Assistance with a network configuration. We have an application on a local server (IIS) and need access to it from the external network:

I try the below steps with no luck, can't access it from an external network

* DDNS:

Created account and host on no-ip
Configure no-ip client on the server and connected

* On Firewall:

1- Configure Virtual IPs (External IP address/range: 0.0.0.0, Mapped IP address/range: LAN IP)

Port Forwarding Protocol (TCP), External service port & Map to port (80)

2- Create Policy

Incoming Interface (WAN)
Outgoing Interface (LAN)
Source (all)
Destination (VIP) created earlier
Schedule (Always)
Service (HTTP)
Action (Accepted)
NAT (Disable) and try (Enable)

Additionally, configure Windows firewall inbound and outbound for port 80

Modem: FortiWiFi 30E

Firmware: v6.2.15 build1378 (GA)

Hong_FTNTAnswer

Staff & Editor

Hi @ATOON.,

Please run the following debugs and test connection:

di deb disable
di deb res
diagnose debug flow filter clear
di deb flow filter addr <source IP>
di deb flow filter port 80
diagnose debug flow show function-name enable
di deb flow show iprope en
diagnose debug console timestamp enable
diagnose debug flow trace start 9999
diagnose debug enable

Regards,

Hong_FTNTAnswer

Staff & Editor

Hi @ATOON.,

Please run the following debugs and test connection:

di deb disable
di deb res
diagnose debug flow filter clear
di deb flow filter addr <source IP>
di deb flow filter port 80
diagnose debug flow show function-name enable
di deb flow show iprope en
diagnose debug console timestamp enable
diagnose debug flow trace start 9999
diagnose debug enable

Regards,

ATOONAuthor

New Member

Please check the debug attached. Di debug

Hong_FTNT

Staff & Editor

@ATOON,

From the debug output, the source IP 10.10.210.250 is not a public IP. Are you making an outbound connection from behind the FortiGate to the public IP of the Huawei router? Do you have port forwarding configured on the router to forward port 80 traffic to 192.168.8.2?

Regards,