Skip to main content
amigliora
New Member
February 18, 2020
Question

Port Forwarding using a Dynamic Public IP

  • February 18, 2020
  • 2 replies
  • 6433 views

Hi All,

I am new with FortiGate and beside I am feeling great with the decision, I am still facing some challenges due to lack of knowledge :(

 

I have my home office with a brand new Fortigate in version 6.2.3

I do not have a public static IP so I am using a dynamic DNS service provided by my domain name registrant.

 

I need to expose a web server, and I did it using the VIP and it works, however I found out I am not able to change the IP address to a Name Address or a FQDN so I can get always service in case of the IP changes on the ISP side.

 

Anyone can help me to find a solution?

 

Thanks in advance and I hope I placed all the info needed

 

    2 replies

    sw2090
    SuperUser
    SuperUser
    February 18, 2020

    if your fortigate is behind a router and itself does due to this not get notified when your external ip changes

    you can have your Fortigate update your dydns regularly. THe option just for some reason is not available in web frontend. You have to set it on cli:

     

    config system ddns

     edit <numberofyourddnsconfig>

       set update-interval <seconds>

      end

    end

     

    maybe this helps

    amigliora
    amiglioraAuthor
    New Member
    February 18, 2020

    Thank you very much sw2090 for your answer.

    Unfortunately, I don't know how this will helping me with the VIPs

     

    As far as I know, the VIP requires an IPv4 address which I have to place and I couldn't find a way to make a reference to FQDN or a DNS entry or a Name Address.

    I had to place xxx.xxx.xxx.xxx didn't find any other option

     

    My FG is behind a Cable Modem 1GBps ->FGT->LAN

    I have the Dyn DNS updated with no issues, I just don't know how to refer this FDQN which the single static piece into my VIP to get the port forwarding :(

    amigliora
    amiglioraAuthor
    New Member
    February 19, 2020

    Hi All,

    I found my answer in this post. https://forum.fortinet.co...m=138081&tree=true

    Basically I did the same mistake, I placed an IP in the VIP extarl IP field, instead of 0.0.0.0

    Now, it doesn't matter what IP I did get assigned from my ISP and the Dyn DNS is doing the rest to ref my FDQN to the assigned IP

     

    Hope this help to someone else.

    Thanks

    Virgule59
    New Member
    February 24, 2020

    Hi amigloria,

     

    Just find this cookbook on forti, seems possible

     

    https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/685361/ddns

     

    Regards