60D 2 externals IPs

[daviazar]

Hi All,

I'm new here and beginner with Forti products. I would like to know if the following configuration is possible with Forti 60D:

1. I want to give my forti 2 externals IPs on the same interface(for ex' 101.101.101.101 - 101.101.101.102) 2. Then, I want to create rule which redirect the connection not by ports' but by the IPs. 3. For ex': if some pack is coming from *.*.*.102:21 redirect it to 10.10.10.25:21

Is it possible? Seems that it doesn't becuase it same interface.

Thanks!

Azaria

[ede_pfau]

hello,

and welcome to the forums.

What you are planning is indeed possible. The 2 external IPs are so close to each other that they will both fit into one address with an address mask of, for example, /29.

Assuming you get these addresses from your ISP: 11.12.13.18 and 11.12.13.19

Then assign 11.12.13.18/29 to wan1.

Create a VIP (virtual IP - see Firewall objects) with these settings:

external IP: 11.12.13.19/32

external port: 0

mapped to: 192.168.33.19 (whatever)

NO port translation

Then create a policy:

src IF: wan1

src address: all

dest IF: internal (whatever)

dest address: this_VIP

service: ANY

action: ACCEPT

This will translate all traffic for destination 11.12.13.19 to your internal host.

[daviazar]

I suspected that this is possible by VIP. I will try this and will update, thanks!