Real IP to servers

Forum|Forum|4 years ago
June 24, 2022
3 replies
2255 views

Hi all

I have a question how to configure something like in pictures

on fortigate
I have 1 ISP with few IP, Iw and use them directly on services like FTP1, FTP2, FTP3.

It is possible to do like that or I always need to cfg the VIP's

The PUBLIC IP -> INTERNAL IP?

FortiGate

sjoshi

Staff

Dear @Quandit,

Thank you for posting to the Fortinet Community Forum.

Problem Description:-
As per your description You want to map some of your public IP with your internal server

Yes, you can configure VIP to achieve the same.
Please find the link for your reference:-
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Virtual-IP-VIP-port-forwarding-configuration/ta-p/198143

If you want to use one external IP to be mapped with multiple IP in the same port then you can use Virtual load balance server.
Please find the link for the same.
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/713497/virtual-server#:~:text=This%20load%20balancing%20method%20uses,processed%20by%20a%20real%20server.&text=Directs%20sessions%20to%20the%20real%20server%20with%20the%20lowest%20round%20trip%20time.

Let us know if this helps.

Thanks

Thanks, Salon

QuanditAuthor

Explorer

Hi sjoshi

Thank you for links, but is not exactly I'm looking for.
I know this VIP mapping, but I don't want use this. In my case one person ask I can put "Real IP" to FTP server in infrastructure.

At now this server ftp have let say some internal IP 10.0.0.5, and I'm doing like in your first link port forwarding

99.98.99.10 to 10.0.0.5 port 21

But it is possible to somehow set up static IP on this FTP like 99.98.99.10?

sjoshi

Staff

Hi @Quandit,

Thanks for the information.

If you want to access any server hosted behind the firewall than VIP is the only option available.

Thanks

Thanks, Salon

Sign up

Login with SSO

Login to the community

Login with SSO