- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
60D 2 externals IPs
Hi All,
I'm new here and beginner with Forti products. I would like to know if the following configuration is possible with Forti 60D:
1. I want to give my forti 2 externals IPs on the same interface(for ex' 101.101.101.101 - 101.101.101.102) 2. Then, I want to create rule which redirect the connection not by ports' but by the IPs. 3. For ex': if some pack is coming from *.*.*.102:21 redirect it to 10.10.10.25:21
Is it possible? Seems that it doesn't becuase it same interface.
Thanks!
Azaria
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hello,
and welcome to the forums.
What you are planning is indeed possible. The 2 external IPs are so close to each other that they will both fit into one address with an address mask of, for example, /29.
Assuming you get these addresses from your ISP: 11.12.13.18 and 11.12.13.19
Then assign 11.12.13.18/29 to wan1.
Create a VIP (virtual IP - see Firewall objects) with these settings:
external IP: 11.12.13.19/32
external port: 0
mapped to: 192.168.33.19 (whatever)
NO port translation
Then create a policy:
src IF: wan1
src address: all
dest IF: internal (whatever)
dest address: this_VIP
service: ANY
action: ACCEPT
This will translate all traffic for destination 11.12.13.19 to your internal host.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I suspected that this is possible by VIP. I will try this and will update, thanks!