Fortigate 100D

[privasia]

Hi All,

I need assistance how configure my LAN IP given by service provider by TIME Broadband Malaysia in my Fortigate 100D..firmware-v5.4.5,build1138.

Obtained IP/Netmask:

211.24.105.178 255.255.255.255 (PPPoE) Acquired DNS:203.121.65.40 8.8.8.8 Default Gateway:223.28.0.216   Given LAN IP (5 fixed) LAN IP: 211.24.103.82-211.24.103.86 Subnet Mask: 255.255.255.248 Default Gateway: 211.24.103.81     Kindly advice and assist me.

[Anurag_Goyal]

Do you want to use all these public ip with your network??

How many systems are there in your network??

[privasia]

Yes correct. i would like to use 211.24.103.83 -192.168.1.215 at the moment.

192.168.1.215 (local IP)is running on one of our server as file system management application.

We would to activate this LAN IP -211.24.103.83 given by service provider in our fortigate firewall to available and accessible by outsider (public).

i still beginner on this fortigate firewall. So, i need to make sure this LAN IP -211.24.103.83 can be access or ping from outside network. 

So, i need your help or guidance on this configuration.

[ede_pfau]

Please get the 'FortiOS Handbook' on docs.fortinet.com and look up the keyword 'Virtual iP' (VIP). This basically is a destination NAT to allow external access to internal hosts, by mapping/translating the destination address of a request.

If time is short and you would like to get a 'recipe' there is the Cookbooks for FortiOS (cookbook.fortinet.com) for the most common scenarios. A recipe will get you running quickly but is not meant to replace background knowledge which is required to manage and configure such a sophisticated firewall.

[Anurag_Goyal]

if you have a PPPoE dialer router/modem behind your FGT, than the senario can be some diffrent.

Otherwise if you connect your ISP connectivity with your FGT, you can use VIP for the same.