Fortigate VM deploy in openstack public cloud issue

[WallaceL]

Hello all,

I'm trying to deploy fortigateVM on a openstack public cloud public cloud platform, already read through the installation guide, cookbook, but still have some confusion on how to configure the WAN port properly. 

My current configuration:

port 1: 192.168.0.1, with floating public IP assigned, e.g. 172.x.x.1 (floating IP can only assign to private network for external accesss)

port 2: 192.168.0.2 (for web server)

I tried to create VIP for port forwarding 172.x.x.2 to 192.168.0.2 for port 80, with policy setup, but unable to access the web site.

The only thing that work is adding VIP 192.168.0.1 to 192.168.0.2 for port 80, and add it to the policy.

However this will not work when I have multiple public IPs for different web servers, now all the public IPs go to 192.168.0.2, even I setup another VIP that map another public IP to another server, e.g. 172.x.x.3 to 192.168.0.3.

I was unable to create another VIP, let say 192.168.0.1 to 192.168.0.3 for port 80, it alerts that it is duplicate.

I appreciate it for any advice on how to configure the openstack network with FortigateVM firewall, thank you.

Regards,

Wallace