Skip to main content
Obie
Obie
New Member
December 16, 2017
Question

PORT FORWARDING

Hey guys,

I followed the instruction on the cookbook to configure port forwarding with an application called go global. When i am connected to my LAN, it works just fine but then when I connected to the internet on the other side of the firewall it does not work. Please, i need help on this ASAP!

    4 replies

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    December 16, 2017

    hi,

     

    please post some more infos: FortiOS version, VIP definition, policy. Preferable from the CLI/console, in text form. We'll see how I can help then.

    Obie
    ObieAuthor
    New Member
    December 18, 2017

    Hello. Thanks for your response.

       Virtual IP

     1. External IP Address/ Range: Virtual IP address

     2. Mapped IP Address/Range: Server Local IP address.

     3. Port Forwarding

    Protocol TCP  UDP  SCTP  ICMP External Service Port -  Map to Port -    VIP Group Name Comments0/255 Interfacewan1 (WAN TO AIRTEL)                   MembersWebserver-goglobal Webserver-80

    POLICY TO ALLOW TRAFFIC

    Incoming Interfacewan1  Source Address all Source User(s)Click to add... Source Device TypeClick to add... Outgoing Interfaceport2  Destination AddressWebserver-http-vip Schedule always ServiceALL ActionACCEPT

    Firewall / Network Options

     NAT-DISABLED  

    Security Profiles

     AntiVirusdefault                 default                Web Filterdefault                 block-security-risks                       default                       flow-monitor-all                       monitor-all                       web-filter-flow                Application Controldefault                 block-p2p                       default                       monitor-p2p-and-media                       P2P                       Youtube-Blocking                IPSdefault                 all_default                       all_default_pass                       default                       high_security                       protect_client                       protect_email_server                       protect_http_server                Email Filterdefault                 default                VoIPdefault                 default                       strict                SSL/SSH Inspectioncertificate-inspection                 certificate-inspection                       deep-inspection              

    Traffic Shaping

     Shared Shaperguarantee-1Mbps             guarantee-1Mbps                 high-priority                 low-priority                 medium-priority                 shared-1M-pipe                 Special Shaper                 Very low bandwidth            Reverse Shaperguarantee-1Mbps             guarantee-1Mbps                 high-priority                 low-priority                 medium-priority                 shared-1M-pipe                 Special Shaper                 Very low bandwidth            Per-IP ShaperNo_bandwidth             No_bandwidth          

    Logging Options

     Log Allowed Traffic  Security Events  All Sessions  Capture Packets Comments0/1023  Enable this policy  Cancel

    rwpatterson
    rwpatterson
    New Member
    December 18, 2017

    You get much better readability if you post the configuration from the CLI instead of the web interface. The above is a hot mess.

    Sidewaysguy
    Sidewaysguy
    New Member
    December 29, 2017

    Obie,

     

    Please clarify, are you hosting this "Go Global" application or are you just trying to connect to it? 

     

    If you are hosting it, then using a VIP, ports and creating the associated policy to allow traffic inbound will work.  If this is the case, you should be able to Telnet to the port from the outside if it has been opened.  Also, if there are multiple ports needed, you may need to create more than one VIP if the ports aren't in a range. 

     

    As noted above, posting the config from the CLI would be preferred.

     

    Thanks

     

    Sidewaysguy

    Terms & ConditionsAccessibility statement
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT