Skip to main content
mjallow
New Member
June 26, 2019
Question

Help Opening Port 8585 on new Server

  • June 26, 2019
  • 1 reply
  • 4102 views

I have 2 servers.

Server A - 192.168.1.246

Server B - 192.168.1.243

External IP Address: 23.236.5.33

 

Firewall: Fortigate100D.

Attempting to Open: Port 8585

 

I have the same settings for Server A and Server B in fortigate100D

 

 

Under Virtual IPS For Server B:

Interface: Any 

External IP Address: 23.236.5.33

Mapped IP Address/Range: 192.168.1.243

Protocol: TCP

External Port Service: 86

Map to Port: 8585

 

We have port 85,86  open with Server A.

I used Port 88 to test with.

I was able to open Port 88 however any other port i try and open with Server A fails except for port 88.

 

No ports whatsoever work when I use Server B as the mapped IP range (Mapped IP range 192.168.1.243)

 

 

 

 

1 reply

Dave_Hall
New Member
June 26, 2019

If you are trying to create port forwards to two internal servers, you need to set them up on different external ports: e.g.

 

config firewall vip     edit "vip-to-server1"         set extintf "wan1"         set portforward enable         set mappedip "192.168.1.246"         set extport 85-86         set mappedport 8585-8586     next     edit "vip-to-server2"         set extintf "wan1"         set portforward enable         set mappedip "192.168.1.243"         set extport 88         set mappedport 8585     next end

Then on the firewall policy, set the source address accordingly (e.g. 0/0 or all for any device connection) then set the dest address to the VIPs. Set NAT accordingly.

 

 

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT