| Description | This article describes how to add more than one server in ZTNA TCP forwarding. |
| Scope | FortiGate ZTNA. |
| Solution | To add more than one server in ZTNA TCP forwarding using the FortiGate GUI, selecting 'Create New' will show the 'TCP forwarding' service as disabled.
This is an expected behavior. To add more than one TCP Forwarding Server, create it via the CLI.
Create a new firewall address object using the IP address of the destination server.
config firewall address
edit linux-b
set subnet 172.31.255.2 255.255.255.255
next
end
After creating the firewall address object, add this new object as a new realserver in the ZTNA Server object.
config firewall access-proxy
edit "ztna_server"
config api-gateway
edit 1
config realservers
edit 0
set address "linux-b"
set mappedport 22
next
end
end
end
After this, the new address object will be available in TCP forwarding.
 |
