Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Kess
New Contributor

Load Balance Logging

Hi guys, I don' t visit these forums since some time now. There' s the situation: FG External IP : 12.13.14.15/32 FG Internal IP : 10.0.0.254/24 I' ve correctly set up a Load Balancer as follows: 1. Health Check : PING 2. Virtual Server - VS-Name - Type : TCP - Interface : wan1 - Virtual Server IP 12.13.14.15 - Virtual Server port : 1234 - LB Method : static - Persistence : None - Health Check : My-PING-Check 3a. Real Server #1 - Virtual Server : VS-Name - IP Address : 10.0.0.1 - Port : 1234 - Max Connections : 0 - Mode : Active 3b. Real Server #2 - Virtual Server : VS-Name - IP Address : 10.0.0.2 - Port : 1234 - Max Connections : 0 - Mode : Active I' ve then created a FW policy thet permits the needed incoming traffic. Everything works perfectly, load balance works as needed. Now the problem: If I check the incoming traffic logs on both my Real Servers, there' s always only an IP address that connects to them. The IP Address I can see in my default gateway IP 10.0.0.254 and not the real external IP addresses. Do you perhaps know how to resolve this ? Thank you a lot, bye Kess.
2 REPLIES 2
Carl_Wallmark
Valued Contributor

Have you enabled NAT on your firewall policy ? It should be disabled.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
Kess
New Contributor

Hi Selective, thank you for your reply. NAT is the first thing I' ve checked when I saw this issue. It' s disabled in the Firewall Policy rule. Any further help is really appreciated. Thank you, bye Kess.
Labels
Top Kudoed Authors