Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
DMN
New Contributor

External access to an internal service by a known IP address

Hi all - need to configure access to an internal service (i.e. ssh) but only allow only 1 x external IP address so what is the best and effective way to achieve this? - thanks in advance :)
6 REPLIES 6
ede_pfau
SuperUser
SuperUser

hi, create a VIP to map your public IP address to the internal address. If your public WAN is dynamic, use ' 0.0.0.0' as a wildcard. Otherwise, use your static address. If you need your WAN address for other services also then enable port forwarding and only forward the (e.g.) ssh port 22 (or whatever). Then create a policy src IF: wan src address: the_one_external_address_allowed dst IF: internal dst address: your_VIP service: either ANY/ALL or specific e.g. ssh NAT: disable That should be all.
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
DMN
New Contributor

thanks for the response and will give it a go :)
DMN
New Contributor

Hi ede_pfau - I am currently forwarding port 80 ext-int so of course when I add a new VIP it states a duplicate entry exists (which is correct) so how do I get around this as I cannot enable port forwarding and have both 80 and 22 open? :)
ede_pfau
SuperUser
SuperUser

Of course you can create 2 VIPs from ' 0.0.0.0' on wan1 to the same internal address, using different ports for multiple services. I' ll attach screenshots from my FGT.
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
ede_pfau
SuperUser
SuperUser

and the details...
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
DMN
New Contributor

great and thanks for the info...makes perfect sense when I think about it :)
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors