Skip to main content
StevenT
StevenT
Explorer II
November 16, 2022
Solved

external access using RDP into fortigate in the loopback

  • November 16, 2022
  • 1 reply
  • 2485 views

Hi,

 

has anyone try before using RDP to access back into the server within a fortigate?

using noip fqdn address as the RDP. while created a loopback interface for the wan port as it only had one public static IP address. 

Will it works? Below is the configuration set.

 

port1 role - WAN

 

policy
incoming int- "port 1" "loop"
outgoing int- "internal"
source- "all"
Destination- "VIP"
service all
nat disabled

 

VIP
int "port 1"
External "public static ip"
IPv4 192.168.50.222
Port Forwarding
external port 9100
ipv4 port 3389

Best answer by distillednetwork

You should be able to create  VIP using the Fortigate's static WAN IP and then create a firewall policy that has a source interface of where the clients are and a destination interface of where the server is with the destination being the VIP address.  If they are on the same port it could be the source int internal destination int internal and the desntaiton is the vip.

 

This is often referred to as Hairpining:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-Hairpin-NAT-VIP/ta-p/195448

 

1 reply

distillednetwork
distillednetworkAnswer
Explorer II
November 16, 2022

You should be able to create  VIP using the Fortigate's static WAN IP and then create a firewall policy that has a source interface of where the clients are and a destination interface of where the server is with the destination being the VIP address.  If they are on the same port it could be the source int internal destination int internal and the desntaiton is the vip.

 

This is often referred to as Hairpining:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-Hairpin-NAT-VIP/ta-p/195448

 

    StevenT
    StevenTAuthor
    Explorer II
    November 17, 2022

    Thanks. Shall try it out.

    Terms & ConditionsAccessibility statement