Multi Wan Address

yvan_rossier · ‎06-23-2017

Hello, I forget about the Forigate 60d (fortios 5.6) and I can not configure several external IP addresses (on the same WAN interface). The fault WAN is configured with an external address (46.20.145.200). I have 4 other external IP addresses that I would like to use to NAT on different internal server, for example: 46.20.145.202 - 192.168.1.201 (Special Port 23587) 46.20.145.203 - 192.168.1.202 (https) 46.20.145.204 - 192.168.1.203 (https) etc ... Idea? Thanks

ede_pfau · ‎06-26-2017

Yes, the Cookbook is an excellent source of information for the most common scenarios with your Fortigate. This specific recipe deals with port-forwarding VIP. As a first step, use a non-port forwarding VIP (just a plain one) to see that it works. Then add one VIP per port translation.

Please post the VIP definition and the custom service def for your port 23560 config.

Ede

"Kernel panic: Aiee, killing interrupt handler!"

View solution in original post

ede_pfau · ‎06-27-2017

You can have only 1 non-portforwarding VIP for one external address but multiple if you port-forward.

If you create multiple VIPs to reach multiple internal servers or one server via multiple services then you may create a VIP group and use this as the 'destination address' in the policy. It's a bit cleaner.

Ede

"Kernel panic: Aiee, killing interrupt handler!"

View solution in original post

rwpatterson · ‎06-27-2017

One caveat is that you will lose the ability to reach the server via a PING. ICMP will no longer work with port forwarding enabled.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

yvan_rossier · ‎06-27-2017

No problem for me :) Everything is now working

thanks