CREATE A VIP - FOR ACCESSING INTERNAL SERVER GUI

[MaxH]

Hello,

I want to create a VIP to be able to access my Internal server Web GUI from External - but i don't know how to do.

I've Few Public IP free from my site.

Someone can explained it to me please?

Regards

[ede_pfau]

Sure.

Outline:

- create VIP

- create policy

- use VIP as destination address

- test

details:

In "Policy and Objects / Virtual IPs", click "Create new".

Give it a name.

Select the interface on which the traffic is coming in (e.g., "wan1").

Enter one of your public IPs (or _the_ one public IP).

-> if you need that address for some other access, you need to create a "port mapping" VIP. That is, the port used for access is arbitrary (= of your choice, 1024-65535) and is going to be translated to the port used for server access (e.g. 80 for HTTP).

"map to": enter the internal address of the server

"optional filters": leave blank atm

"Port Forwarding": depends on your situation like explained above.

Click OK to create the VIP.

Note: the VIP will _not_ be active by now. For that to happen, it needs to be used in a policy.

Create a policy.

For example, from source interface "wan1" to LAN port "internal1", source address "all" to destination address "myVIP" (!), service (whatever is desired), no NAT.

Now test.

Note: only if the VIP is not port forwarding you can use ping to test the access.

That's all.

[raureada]

Hi @MaxH 

You can follow the below guide to set up the VIP.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Virtual-IP-VIP-port-forwarding-configurati...

[Nik_Aiman]

Hi There

You may also refer to our administration guide for configuring VIP

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/510402

Regards,

Nik