How do I publish multiple services on a single external IP-address?

Forum|Forum|16 years ago
December 23, 2009
9 replies
6065 views

Hi all. I have a single external IP-address which I want to use for publishing multiple services (incoming SMTP, web servers, etc). Currently I' m using ISA Server 2006 but I decided to try and use my FortiGate-50B for this instead. Unfortunately the ISA Server and the FortiGate GUI are anything but similar so I' m having a hard time getting this done. My first question, after mucking about in both the manual and the GUI, is " Is this even doable?" I tried to create a Virtual IP as that sounded like something I wanted (NAT, etc) but I can only assign the external address to one internal address so that didn' t get me very far. Thanks in advance for any help.

abelio

SuperUser

I have a single external IP-address which I want to use for publishing multiple services (incoming SMTP, web servers, etc).

use Virtual IP with port forwarding feature; do a search within http://kb.forticare.com for examples

A

Anonymous_UserAuthor

Contributor III

I tried the Virtual IP feature but it didn' t allow me to use the same external address twice. The external address is also assigned to me via DHCP which I suppose might complicate things?

harald21

New Member

Hi Martin, when you dont have a static external IP, so use 0.0.0.0 as your external IP, this will use whatever IP address is currently assigned to your external interface. VIP is definitely the right place to look for! Sincerely Harald

A

Anonymous_UserAuthor

Contributor III

Hi Harald. I tried this but I got a warning that I can' t use the same IP-address twice. I must have done something wrong and I' ll give it another try tonight. Thanks for your reply! :)

rwpatterson

New Member

Make sure you select the port forwarding option.

harald21

New Member

Hi Martin, offcourse you have to use 0.0.0.0 as your external IP address _AND_ the port forwarding option in Virtual IP' s. Host headers are not checked at the Fortigate, you will have to do this at your web server (apache or IIS). Sincerely Harald

A

Anonymous_UserAuthor

Contributor III

ORIGINAL: harald21 Hi Martin, offcourse you have to use 0.0.0.0 as your external IP address _AND_ the port forwarding option in Virtual IP' s. Host headers are not checked at the Fortigate, you will have to do this at your web server (apache or IIS). Sincerely Harald

Hi. I have multiple web servers, hence the need to separate on host headers at the firewall. It' s not a big issue - I can use alternative ports for the lesser used ones. Thanks again for all the replies.

Sign up

Login with SSO

Login to the community

Login with SSO