Allow access from Guest network to server hosted internally via public IP address

[martyyy]

Hi,

We need to be able to allow connectivity from devices on a Guest network (subnet 192.168.50.0/24) to a server hosted internally on the LAN (subnet 192.168.5.0/24 - server IP 192.168.5.245 port TCP/48082) but it needs to be able to be connected from via. the external IP address (125.x.x.x)

How can we set up policies and objects to allow this? We already have a VIP in place to allow connectivity to the server from the Internet and this works well.

Appreciate your insights :) 

Thank you!

[AEK]

Hi Marty

You need to configure Hairpin NAT.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-Hairpin-NAT-VIP/ta-p/195448