Multiple VIP question
I have a below scenario but not sure how to deal with it I am using V6 OS of fortigate firewall.
I have DMZ,LAN, WAN interfaces
for a web server I need to define VIP which have specific port requriements.
DMZ Access requirement:
For example:
ext:80.80.80.1 Map:10.10.10.1 Orig-service:4443 map-service:443
ext:80.80.80.1 Map:10.10.10.1 Orig-service:80 map-service:8080
WAN access Requirements:
ext:80.80.80.1 Map:10.10.10.1 Orig-service:443 map-service:4443
ext:80.80.80.1 Map:10.10.10.1 Orig-service:2222 map-service:22
LAN access requirements:
ext:80.80.80.1 Map:10.10.10.1 Orig-service:any map-service:any
Problem now I am able to create above DMZ and WAN Vip combinations but not allowing me to create vip without port-forward option enable and saying duplicate exist when i turnoff the port-forward option in VIP just to create as a simple VIP.
Please can someone help me how to deal with this situation as I have lots of rules which require config to use as any service.but it won't let me create as can't specify VIP without port due top above VIP's created.
