Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
amih
New Contributor

Forti web IP with Multi port

Hello,

I have Forti web and I want to put one address on it with more than one Port for the same address:

Server IP with port

10.0.0.1:6111

10.0.0.1:6112

 

Is it possible to set one virtual IP address for all port or set a virtual IP address for each port?

scenario 1:

virtual IP 20.1.1.1:6111  ------ IP 10.0.0.1:6111

virtual IP 20.1.1.1:6112  ------ IP 10.0.0.1:6112

 

scenario 2

virtual IP 20.1.1.1:6111  ------ IP 10.0.0.1:6111

virtual IP 20.1.1.2:6112  ------ IP 10.0.0.1:6112

 

Which scenario should be done?

Thanks

3 REPLIES 3
ozkanaltas
Valued Contributor II

Hello @amih ,

 

Both can be applied.

 

In my opinion, the best one is the first one. Because you just use one public IP for that. Nowadays Public IPs are a valuable thing. Because of that, we don't want to waste it.

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
amih
New Contributor

Hello ozkanaltas,

I appreciate the response.

Thanks

AEK
SuperUser
SuperUser

Hi

As Atlas said both are doable, but in my opinion I always find the third scenario better, using HTTP content routing, you still use one pub IP and your clients don't have to specify a port (especially if they are not familiar with ports).

scenario 3

virtual IP 20.1.1.1:443  ------ IP 10.0.0.1:6111

virtual IP 20.1.1.1:443  ------ IP 10.0.0.1:6112

virtual IP 20.1.1.1:443  ------ IP 10.1.1.1:443

virtual IP 20.1.1.1:443  ------ IP 10.2.2.1:80

and so ...

AEK
AEK
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors