Setting up external access to QNAP webinterface

Does QNAP' s default gateway points to Fortigate internal IP number?

Thank you very much for your answer. Yes, the default gateway is the internal IP of the fortigate unit.

Hard to tell from the little information given. You' ve done the configuration from the book, there is no obvious fault in it. I suspect the QNAP to have a problem with routing or authentication. Suggestion: change the VIP such that you don' t port forward. The effect will be that all traffic directed to your external IP will be forwarded to the QNAP. It' s only temporarily. Then replace the QNAP with a PC, without a personal firewall. Then you can ping the target and see if that works. (Maybe the QNAP will answer to pings as well so you don' t have to substitute it.) What does the documentation of QNAP say about web access - is it https, will it check for local source addresses,...?

I have tested pinging the QNAP after turning off port forwarding from an outside machine to no avail. It responds to pings from inside the network. The webaccess is http. There is a https option, but I wanted to test this first. I don' t quite understand what checking for local source addresses means, could you elaborate? The administration from inside the network works flawlessly. The depressing thing is that I got it to work when no one was using it, but as soon as interest arose from my boss, the darn thing stopped working. Is there some option to somehow completely turn off the firewall for specific IPs? EDIT: I can in fact ping it from the outside. Some packets are lost, some say " Zielnetz nicht erreichbar" wich means something along the lines of target network not available. So I can at least tell it' s there. :D

There is a https option, but I wanted to test this first. I don' t quite understand what checking for local source addresses means, could you elaborate?

Some webservers check if the HTTP request has a local source address. But as pings don' t come through at all we don' t need to bother about HTTP. You are not quite clear about the success of pings: are some of them returned, some rejected, some lost? You only have 1 external IP, don' t you? We can proceed with debugging on the Fortigate if needs be.

I cannot find anything regarding a check for local source addresses. Two packets timed out, the remaining two said " Zielnetz nicht erreichbar" (Target Network not reachable). EDIT: The answer is coming from the correct IP by the way. Actually I have two external IPs, only one of them updates dyndns though, so this shouldn' t be a problem I assumed. Stupid? :)

The default gateway is set correctly. Since I don' t work with subnets, the subnetmask 255.255.255.0 should also be correct? I don' t really know where to check subnet settings on the fortigate.

How is the IP and subnetmask defined on the QNAP? What are the settings for the internal interface on the FG? System/Network

Ah there it is. Right where it should be. :-) The QNAP has a static IP, default gateway and subnetmask can be manually set and are set to the values of the internal interface of the fortigate. (192.168.1.1 / 255.255.255.0 I now see that wan1 (the interface i try to use for external access) has the subnetmask of 255.255.255.255. This might be the problem?

au bitte, könnten wir mit dem Ratespiel aufhören?? wie sind die Einstellungen am QNAP GENAU? und für das int. Interface der FG GENAU? jeweils 3 Werte bitte: IP, Maske und Gateway.