Skip to main content
Nelvin
New Member
April 15, 2019
Solved

Port Forwarding In FortiGate 100E

  • April 15, 2019
  • 1 reply
  • 6403 views

Hi Everyone,

 

How to enable the port forwarding for 5000 Synology and port 9999 CCTV ?

My company subscribed dynamic IP from ISP.

Last Friday, the vendor installed Fortigate 100E and he say only Static IP able to set port forwarding..

Could someone save my life?

Thank you.

    Best answer by ede_pfau

    Of course you can get access to your internal hosts even with a dynamic WAN IP.

    Bind the WAN IP to a dynDNS name - even Fortinet offers a free dynDNS account.

    Then, create a VIP (virtual IP, in 'Network') with external address "0.0.0.0" - as a stand-in for the changing dynamic WAN IP.

    Create a policy from WAN to LAN, '0.0.0.0/0' to VIP (!), service whatever_appropriate, no NAT. That's all.

    1 reply

    ahmedsf
    New Member
    April 15, 2019

    you must have Synology and CCTV on some subnet, in VIP bind each subnet to one static IP and put the port forwarding. 

    ede_pfau
    SuperUser
    ede_pfauAnswer
    SuperUser
    April 15, 2019

    Of course you can get access to your internal hosts even with a dynamic WAN IP.

    Bind the WAN IP to a dynDNS name - even Fortinet offers a free dynDNS account.

    Then, create a VIP (virtual IP, in 'Network') with external address "0.0.0.0" - as a stand-in for the changing dynamic WAN IP.

    Create a policy from WAN to LAN, '0.0.0.0/0' to VIP (!), service whatever_appropriate, no NAT. That's all.

    Nelvin
    NelvinAuthor
    New Member
    April 16, 2019

    I follow your instruction and its work. So much thanks!