How do I publish multiple services on a single external IP-address?

[#1]

Hi all. I have a single external IP-address which I want to use for publishing multiple services (incoming SMTP, web servers, etc). Currently I' m using ISA Server 2006 but I decided to try and use my FortiGate-50B for this instead. Unfortunately the ISA Server and the FortiGate GUI are anything but similar so I' m having a hard time getting this done. My first question, after mucking about in both the manual and the GUI, is " Is this even doable?" I tried to create a Virtual IP as that sounded like something I wanted (NAT, etc) but I can only assign the external address to one internal address so that didn' t get me very far. Thanks in advance for any help.

[abelio]

I have a single external IP-address which I want to use for publishing multiple services (incoming SMTP, web servers, etc).

use Virtual IP with port forwarding feature; do a search within http://kb.forticare.com for examples

[#3]

I tried the Virtual IP feature but it didn' t allow me to use the same external address twice. The external address is also assigned to me via DHCP which I suppose might complicate things?

[harald21]

Hi Martin, when you dont have a static external IP, so use 0.0.0.0 as your external IP, this will use whatever IP address is currently assigned to your external interface. VIP is definitely the right place to look for! Sincerely Harald

[#5]

Hi Harald. I tried this but I got a warning that I can' t use the same IP-address twice. I must have done something wrong and I' ll give it another try tonight. Thanks for your reply! :)

[rwpatterson]

Make sure you select the port forwarding option.

[#7]

I assume that there is no option to use host headers to forward different web sites on port 80 then?

[abelio]

I assume that there is no option to use host headers to forward different web sites on port 80 then?

exactly

[harald21]

Hi Martin, offcourse you have to use 0.0.0.0 as your external IP address _AND_ the port forwarding option in Virtual IP' s. Host headers are not checked at the Fortigate, you will have to do this at your web server (apache or IIS). Sincerely Harald

[#10]

ORIGINAL: harald21 Hi Martin, offcourse you have to use 0.0.0.0 as your external IP address _AND_ the port forwarding option in Virtual IP' s. Host headers are not checked at the Fortigate, you will have to do this at your web server (apache or IIS). Sincerely Harald

Hi. I have multiple web servers, hence the need to separate on host headers at the firewall. It' s not a big issue - I can use alternative ports for the lesser used ones. Thanks again for all the replies.