Skip to main content
msayad
msayad
New Member
January 16, 2017
Solved

Port forwarding on FortiGate 60D

  • January 16, 2017
  • 1 reply
  • 9098 views

Hi all,

I'm new to fortigate, this is my first time setting up port forwarding on fortigate routers 60D.

I have created 2 VIPs to forward ports 85 and 37777 to a specific internal IP address, then created 2 group VIPs, create the services and then added the firewall rules. However, when I try to verify or the ports, I get ports are closed.

 

Configuration attached

    Best answer by moby

    Hi,

    Please try this  - -delete your firewall policies for this traffic and then delete the VIP's. Then re-create your VIP's and select "External Interface = WAN1" when you re-create your VIP's.

     

    Then re-create your policies again and re-test. If that still does not work then try doing a debug flow of the traffic and post the results.

     

    diag debug enable

    diag debug flow filter daddr x.x.x.x  (where daddr is the public IP of your VIP)

    diag debug flow show console enable

    diag debug flow trace start 50

     

    Moby

    1 reply

    moby
    mobyAnswer
    New Member
    January 16, 2017

    Hi,

    Please try this  - -delete your firewall policies for this traffic and then delete the VIP's. Then re-create your VIP's and select "External Interface = WAN1" when you re-create your VIP's.

     

    Then re-create your policies again and re-test. If that still does not work then try doing a debug flow of the traffic and post the results.

     

    diag debug enable

    diag debug flow filter daddr x.x.x.x  (where daddr is the public IP of your VIP)

    diag debug flow show console enable

    diag debug flow trace start 50

     

    Moby

    Terms & ConditionsAccessibility statement