FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
mle2802
Staff
Staff
Article Id 291465
Description

This article describes how to map a single external IP to an internal IP range to circumvent the 'Invalid IPv4 address' error.

Scope FortiGate.
Solution

When creating a VIP to map a single external IP to an internal IP range, the error 'Invalid IPv4 address' will appear:

 

invalid vip.PNG

 

This is expected behavior. To map a single external IP to an internal IP range, it will be necessary to set the VIP type to 'load-balance'.

 

This option is only available through the CLI:

 

config firewall vip

edit "fdg"

set type load-balance

set extintf port1

set extip 192.168.2.77

set mappedip 10.10.10.1-10.10.10.5

end

 

Related article:
Technical Tip: Using Virtual IPs to configure port forwarding