Skip to main content
rob8435
rob8435
New Member
September 30, 2021
Question

Virtual IP - "extintf"

  • September 30, 2021
  • 1 reply
  • 3256 views

Hello,

please, can somebody explain me extintf attribute in config firewall vip?

I set new dNAT a is seems it doesn't matter what interface is selected in "extintf" parametr (it works also with disabled/not connected device selected in "extintf").

 

FortiOS 6.4.6.

 

Thank you.

Rob

    1 reply

    localhost
    localhost
    Visitor III
    October 1, 2021

    As far as I know, it only has an impact on hairpain NAT rules.

    If you don't match it to the correct interface or set the value to 'any', you'd have to create a seperate policy for each source-destination combination.

     

    See the DMZ example in following knowledge base article:

    https://kb.fortinet.com/kb/documentLink.do?externalID=FD36202

     

    Terms & ConditionsAccessibility statement