Skip to main content
Rob_Drummond
Rob_Drummond
New Member
February 7, 2013
Question

How to create Port forwarding policy based on FQDN

  • February 7, 2013
  • 1 reply
  • 6635 views
Hi. I have recently purchased a Fortigate WiFi 60C. I am very impressed with the unit and I understand that it should be able to do what I want to do. I am wondering if someone could help me with my configuration. I have 1 static Public IP address a requirement to do port forwarding based on the " incoming" FQDN. I have internal servers/services that use the same port (443) and since I only have 1 IP address I need to direct the incoming request based on FQDN. I am currently able to do this with Microsoft Forefront TMG, but I' d like to move this over to my Fortigate. Any assistance on this would be most appreciated. Thanks Rob

    1 reply

    stephen_ren_FTNT
    Staff
    stephen_ren_FTNT
    Staff
    March 19, 2013
    Hi, You can register the domain name on the DNS server on the internet, then config a vip on the fortigate,mapping the public ip to your internal server ip address with port forwarding(for example port80 forward to port443). a config example: config firewall vip edit " vip-test" set arp-reply disable set extip x.x.x.x(public ip) set extintf " port1" set portforward enable set mappedip y.y.y.y(internal ip) set extport 80 set mappedport 443 next end config firewall policy edit 3 set srcintf " port1" set dstintf " port2" set srcaddr " any" set dstaddr " vip-test" set action accept set schedule " always" set service " ANY" set nat enable next
    Terms & ConditionsAccessibility statement