Hi all,
I am using Fortigate 40c firewall. Currently i have mapped a private ip and pubic ip to the firewall. i have added all the required information given in http://cookbook.fortinet.com/using-virtual-ips-configure-port-forwarding-54/. But it displaying the firewall login when am trying to access the domain from outside connection.
Thanks in Advance
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi
i think your trying to access the 443 or 80 port from outside. firewall login also use the same port to access GUI.
change the firewall login port in the administration settings. change to 8080 from 443
Regards
Mahesh
Thanks for your replay Mahesh.
Our port configurations is like:
HTTP Port : 80
HTTPS Port: 443
Telnet Port :23
SSH Port :22
We are still facing the same problem.
Thanks in advance
Hi
if you trying to access your domain with https then change the https port in admin settings to 8080
or if you trying with http then change http port in admin settings to 81
ex:- https:\\test.yourdomain.com
http:\\test.yourdomain.com
Regards
Mahesh
Hi,
Thanks for the quick reply.i am trying to access the website using http only. so now i have changed the port to 81 . now the "unable to connect" error message displaying while accessing the domain name.
Thanks in advance
Hi
now you have to verify the VIP settings. make sure that you have config VIP with below settings
1.external ip address is ISP ip address
2.mapped ip is internal system ip
3.both external and mapped ports are same ( 80 )
4. a policy from wan interface to lan interface with destination address as VIP you have created under firewall VIP
also please share the below output
config firewall vip
show
Regards
Mahesh
Hi,
Thanks for the reply.
Now our config firewall shows the following;
"Webserver" set extip *.*.*.184 set extintf "wan1" set portforward enable set mappedip 192.168.1.100 set extport 80 set mappedport 80
Exip is the IP provided by the isp which is pointed to the domain name.
We have also created wan to lan policy with destination address as vip(mappedip)
Hi
1. is that possible to access web service in local lan ?
2. any policy route is config in firewall unit?
3.make sure that windows firewall is off in server (192.168.1.100)
just try to enable NAT in external to internal access policy just for checking the connection accept status
also collect the below log and share if possible
diag debug disable
diag debug reset
diag debug flow filter saddr ( ip from your trying to access the domain )
diag debug flow filter daddr ( server ip 192.168.1.100)
diag debug flow show function-name enable
diag debug flow show console enable
diag debug flow trace start 1000
diag debug enable
Regards
Mahesh
Hi,
1.i can able to access web service from local LAN.
2.Routing is enabled in the interface
3. Actually we configured a Linux server not windows
diag debug flow filter saddr
Host saddr: any
diag debug flow filter daddr
Host daddr: any
Thanks in advance
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1660 | |
1072 | |
751 | |
443 | |
219 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.