Description
This article describes how to use the correct format when creating a port forwarding range.
Scope
FortiGate v6 and later.
Solution
To create a port forwarding range, there is a specific format necessary to enter in the field.
There must not be any spaces included between the port numbers. For example:
Invalid:
8010 – 8020
Valid:
8010-8020
Use the following CLI commands to create a port forwarding range:
config firewall vip
edit "forwarding_test"
set extip 1.1.1.1
set mappedip "192.168.1.1"
set extintf "any"
set portforward enable
set extport 8010-8020
set mappedport 8010-8020
next
end
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.