Yet another VIP thread

Eugene.milon wrote:

If that doesnt work then can you show us the CLI config for you have.

 

config firewall service custom

edit xxx

show

end

config firewall vip

edit xxx

show

end

config firewall policy

edit xx

show

end

 

put the name or number each entry where the x's are. Replace any sensitive information as needed.

 

CLI config

The two custom services:

--More-- edit "DVR1 Server"

--More-- set category "Camera Systems"

--More-- set iprange 10.0.0.150

--More-- set tcp-portrange 0-65535:5000 0-65535:100

--More-- next

--More-- edit "DVR2 Server"

--More-- set category "Camera Systems"

--More-- set iprange 10.0.0.151

--More-- set tcp-portrange 0-65535:5001 0-65535:100

--More-- next

--More-- end

VIPs

edit "DVR1 Server"

 set uuid xxxx

 set extip x.x.x.168

 set extintf "wan1"

 set portforward enable

 set mappedip "10.0.0.150"

 set extport 5000

 set mappedport 5000

 next

 edit "DVR2 Server"

 set uuid xxxx

 set extip x.x.x.168

 set extintf "wan1"

 set portforward enable

 set mappedip "10.0.0.1"

 set extport 5001

 set mappedport 5001

Policy

wan:

 set name "internet"

 set uuid xxxx

 set srcintf "lan"

 set dstintf "wan1"

 set srcaddr "all"

 set dstaddr "all"

 set action accept

 set schedule "always"

 set service "ALL"

 set nat enable

DVR

--More-- set name "DVR access"

--More-- set uuid xxxx

--More-- set srcintf "wan1"

--More-- set dstintf "lan"

--More-- set srcaddr "all"

--More-- set dstaddr "DVRs"

--More-- set action accept

--More-- set schedule "always"

--More-- set service "DVR1 Server" "DVR2 Server"

--More-- set logtraffic all

I have other policies related to the tunnel and wifi and such but shouldn't be relevant here.

Thanks again for the help. I will continue at this but will call support if need be.