Real IP to servers

[Quandit]

Hi all

I have a question how to configure something like in pictures

on fortigate
I have 1 ISP with few IP, Iw and use them directly on services like FTP1, FTP2, FTP3.

It is possible to do like that or I always need to cfg the VIP's

The PUBLIC IP -> INTERNAL IP?

[sjoshi]

Dear Quandit,

Thank you for posting to the Fortinet Community Forum.

Problem Description:-
As per your description You want to map some of your public IP with your internal server

Yes, you can configure VIP to achieve the same.
Please find the link for your reference:-
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Virtual-IP-VIP-port-forwarding-configurati...

If you want to use one external IP to be mapped with multiple IP in the same port then you can use Virtual load balance server.
Please find the link for the same.
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/713497/virtual-server#:~:text=This%20loa....

Let us know if this helps.

Thanks

[Quandit]

Hi sjoshi

Thank you for links, but is not exactly I'm looking for.
I know this VIP mapping, but I don't want use this. In my case one person ask I can put "Real IP" to FTP server in infrastructure.

At now this server ftp have let say some internal IP 10.0.0.5, and I'm doing like in your first link port forwarding

99.98.99.10 to 10.0.0.5 port 21

But it is possible to somehow set up static IP on this FTP like 99.98.99.10?

[sjoshi]

Hi Quandit,

Thanks for the information.

If you want to access any server hosted behind the firewall than VIP is the only option available.

Thanks