How to access internal Website over VIP from LAN?

[ITAxess]

Hallo! I have a Webserver in my LAN: 10.0.0.30 with open Port 14000 and assigned a VIP: 123.123.123.123 From the Internet, I can access the Website: http://123.123.123.123:14000 PROBLEM: I need to access this website from the LAN 10.0.0.0/24 via the external URL http://123.123.123.123:14000 At the moment, I can only access the Website from the LAN with the URL http://10.0.0.30:14000 How can I configure that?

[rwpatterson]

What model switch?

[rwdorman]

You need to create an Inside -> Inside policy with the destination being the VIP. I just ran into the same issue the other day.

[danto]

Hi, I' ve tried the policy Inside->inside but it does not work.

[billp]

This thread has some additional information on this topic: http://support.fortinet.com/forum/tm.asp?m=99708&appid=&p=&mpage=1&key=hairpin&language=single&tmode...

[Dave_Hall]

If your web server is accessible via DNS, you may want to consider DNS translation.

[AtiT]

Hi, I' m not sure but maybe enabling the NAT (bind to FTG interface) can help.

[ITAxess]

DNS Translation is the Solution config firewall dnstranslation THANKS!!!

[Fullmoon]

ORIGINAL: ITAxess DNS Translation is the Solution config firewall dnstranslation THANKS!!!

Hi, what do you mean by your statement?have similar problem too. thanks

[ede_pfau]

DNS translation will substitute the resolved IP address of a DNS query to another IP address. In your case, if internal users access " www.myweb.com" they will not get " 72.3.45.6" (public IP address) but " 192.168.4.4" (internal address) as reply. For details, see FortiOS CLI Guide, pg. 98 (for v4MR3).