- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Displying Firewall Login when searching domain name
Hi all,
I am using Fortigate 40c firewall. Currently i have mapped a private ip and pubic ip to the firewall. i have added all the required information given in http://cookbook.fortinet.com/using-virtual-ips-configure-port-forwarding-54/. But it displaying the firewall login when am trying to access the domain from outside connection.
Thanks in Advance
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
i think your trying to access the 443 or 80 port from outside. firewall login also use the same port to access GUI.
change the firewall login port in the administration settings. change to 8080 from 443
Regards
Mahesh
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for your replay Mahesh.
Our port configurations is like:
HTTP Port : 80
HTTPS Port: 443
Telnet Port :23
SSH Port :22
We are still facing the same problem.
Thanks in advance
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
if you trying to access your domain with https then change the https port in admin settings to 8080
or if you trying with http then change http port in admin settings to 81
ex:- https:\\test.yourdomain.com
http:\\test.yourdomain.com
Regards
Mahesh
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Thanks for the quick reply.i am trying to access the website using http only. so now i have changed the port to 81 . now the "unable to connect" error message displaying while accessing the domain name.
Thanks in advance
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
now you have to verify the VIP settings. make sure that you have config VIP with below settings
1.external ip address is ISP ip address
2.mapped ip is internal system ip
3.both external and mapped ports are same ( 80 )
4. a policy from wan interface to lan interface with destination address as VIP you have created under firewall VIP
also please share the below output
config firewall vip
show
Regards
Mahesh
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Thanks for the reply.
Now our config firewall shows the following;
"Webserver" set extip *.*.*.184 set extintf "wan1" set portforward enable set mappedip 192.168.1.100 set extport 80 set mappedport 80
Exip is the IP provided by the isp which is pointed to the domain name.
We have also created wan to lan policy with destination address as vip(mappedip)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
1. is that possible to access web service in local lan ?
2. any policy route is config in firewall unit?
3.make sure that windows firewall is off in server (192.168.1.100)
just try to enable NAT in external to internal access policy just for checking the connection accept status
also collect the below log and share if possible
diag debug disable
diag debug reset
diag debug flow filter saddr ( ip from your trying to access the domain )
diag debug flow filter daddr ( server ip 192.168.1.100)
diag debug flow show function-name enable
diag debug flow show console enable
diag debug flow trace start 1000
diag debug enable
Regards
Mahesh
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
1.i can able to access web service from local LAN.
2.Routing is enabled in the interface
3. Actually we configured a Linux server not windows
diag debug flow filter saddr
Host saddr: any
diag debug flow filter daddr
Host daddr: any
Thanks in advance