Technical Tip: Configuring ‘set type server-load-balance’ in ‘config firewall vip’ via GUI

[satoh]

Description	This article describes how to configure 'set type load-balance' in 'config firewall vip' via GUI.
Scope	FortiGate v7.2.
Solution	'set type static-nat', 'set type load-balance', 'set type dns-translation', 'set type fqdn', and 'set type access-proxy' in 'config firewall vip' can be configured from Policy & Object -> Virtual IPs in the GUI, but 'set type server-load-balance' is not visible in Policy & Object -> Virtual IPs. 'set type server-load-balance' is visible in Policy & Object -> Virtual Servers.  Example: From the CLI: 'set type server-load-balance' can be configured in 'config firewall vip'. FortiGate-01 (test-vip-static-nat) # set type ?     static-nat             Static NAT.     load-balance           Load balance.     server-load-balance    Server load balance. <-----          dns-translation        DNS translation.     fqdn                   Fully qualified domain name.     access-proxy           Access proxy. config firewall vip     edit "test-vip-static-nat"         set extip 1.1.1.1         set mappedip "2.2.2.2"         set extintf "port2"     next     edit "test-vip-load-balance"         set type load-balance         set extip 1.1.1.1         set mappedip "2.2.2.2"         set extintf "port2"     next     edit "test-vip-server-load-balance"         set type server-load-balance  <-----          set extip 1.1.1.1         set extintf "port2"         set server-type https         set extport 443             config realservers                 edit 1                     set ip 2.2.2.2                     set port 443                 next             end         set ssl-mode full         set ssl-certificate "Fortinet_Factory"     next     edit "test-vip-dns-translation"         set type dns-translation         set extip 1.1.1.1         set mappedip "2.2.2.2"         set extintf "port2"     next     edit "test-vip-fqdn"         set type fqdn         set extip 1.1.1.1         set extintf "port2"         set mapped-addr "gmail.com"     next     edit "test-vip-access-proxy"         set type access-proxy         set extip 1.1.1.1         set extintf "port2"         set server-type https         set extport 443         set ssl-certificate "Fortinet_Factory"     next end From the GUI: 'set type server-load-balance' is not in Virtual IPs, but is in Virtual Servers.  Go to Policy & Objects -> Virtual Servers. Go to Policy & Objects -> Virtual IPs.        Note: Virtual Servers are hidden by default. To view them, go to System -> Feature Visibility and select Load Balance. Related document: Virtual server load balance