Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Not applicable

Many to Many VIP

Hi, I was wondering if there is any way to create a Virtual IP that maps a range of external addresses to a range of internal addresses? The reason I would like to do this is I have quite a few web servers on the internal network that are accessed from the internet. Instead of adding 10 individual VIPs, one for each web server, I would like to be able to create a VIP that maps the range of IP addresses. e.g. public: 65.65.65.0 to 65.65.65.31 is mapped to private: 10.10.10.0 to 10.10.10.31. Or is there an easier way to do this? I am running v2.80 MR11 on a 100A unit. Thanks, Doug
2 REPLIES 2
UkWizard
New Contributor

not really, create the list in notepad and paste it into the CLI, thats the quickest way. Just work our the lines needed to make the entry (looking at a current config dump should show you how the lines should be constructed.
UK Based Technical Consultant FCSE v2.5 FCSE v2.8 FCNSP v3 Specialising in Systems, Apps, SAN Storage and Networks, with over 25 Yrs IT experience.
UK Based Technical Consultant FCSE v2.5 FCSE v2.8 FCNSP v3 Specialising in Systems, Apps, SAN Storage and Networks, with over 25 Yrs IT experience.
Not applicable

Thanks for the advice. That' s exactly what I did. To be more specific, because I had 60 VIPs and corresponding policies to create, I created an excel spreadsheet with names and IP addresses, and then used MS Word to mail merge each excel row into a config file block containing the appropriate name and IP. Then I was able to copy and paste into the CLI to create all the VIPs and policies. I notice that v3 can map address ranges. That sure would make my policy list a lot simpler! Instead of 60 policies, I would have about 8. Thanks, Doug
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors