Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
BioMining
New Contributor

Displying Firewall Login when searching domain name

Hi all,

 

I am using Fortigate 40c firewall. Currently i have mapped a private ip and pubic ip to the firewall. i have added all the required information given in http://cookbook.fortinet.com/using-virtual-ips-configure-port-forwarding-54/. But it displaying the firewall login when am trying to access the domain from outside connection.

 

Thanks in Advance

 

8 REPLIES 8
mahesh_secure
Contributor

Hi

 

i think your trying to access the 443 or 80 port from outside. firewall login also use the same port to access GUI.

 

change the firewall login port in the administration settings. change to 8080 from 443

 

Regards

Mahesh

BioMining

Thanks for your replay Mahesh.

Our port configurations is like:

HTTP Port : 80

HTTPS Port: 443

Telnet Port :23

SSH Port :22

 We are still facing the same problem.

 

Thanks in advance

mahesh_secure

Hi

 

if you trying to access your domain with https then change the https port in admin settings to 8080

or if you trying with http then change http port in admin settings to 81

 

ex:- https:\\test.yourdomain.com

       http:\\test.yourdomain.com

 

 

Regards

Mahesh

BioMining

Hi,

 

Thanks for the quick reply.i am trying to access the website using http only. so now i have changed the port to 81 . now the "unable to connect" error message displaying while accessing the domain name.

 

Thanks in advance

mahesh_secure

Hi

 

now you have to verify the VIP settings. make sure that you have config VIP with below settings

 

1.external ip address is ISP ip address

2.mapped ip is internal system ip

3.both external and mapped ports are same ( 80 )

4. a policy from wan interface to lan interface with destination address as VIP you have created under firewall VIP

 

also please share the below output

 

config firewall vip

show

 

 

Regards

Mahesh

BioMining

Hi,

Thanks for the reply.

Now our config firewall shows the following;

 

"Webserver" set extip *.*.*.184 set extintf "wan1" set portforward enable set mappedip 192.168.1.100 set extport 80 set mappedport 80

 

Exip is the IP provided by the isp which is pointed to the domain name.

We have also created wan to lan policy with destination address as vip(mappedip)

mahesh_secure

Hi

 

1. is that possible to access web service in local lan ?

2. any policy route is config in firewall unit?

3.make sure that windows firewall is off in server (192.168.1.100)

 

just try to enable NAT in external to internal access policy just for checking the connection accept status

 

 

also collect the below log and share if possible

 

diag debug disable

diag debug reset

diag debug flow filter saddr ( ip from your trying to access the domain )

diag debug flow filter daddr ( server ip 192.168.1.100)

diag debug flow show function-name enable

diag debug flow show console enable

diag debug flow trace start 1000

diag debug enable

 

 

Regards

Mahesh

 

BioMining

Hi,

1.i can able to access web service from local LAN.

2.Routing is enabled in the interface

3. Actually we configured a Linux server not windows

diag debug flow filter saddr 

Host saddr: any

diag debug flow filter daddr

Host daddr: any

 

Thanks in advance

 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors