- ONE DEFAULT ROUTE FOR INTERNET WORKING ...
- 2 POLICY BASED ROUTES FOR EACH VM , ONE FOR FORWARD ONR FOR BACKWARD ...
- 1 POLICY FOR LAN TO WAN FOR INTERNET
- 2 POLICIES FOR EACH VM , ONE FOR FORWARD AND SECOND FOR BACKWARD
- VIP IS USED FOR EACH VM
- ONE SERVER IS SIP SERVER , WHICH IS WORKING FINE , INGOING AND OUTGOING
- ONE SERVER IS WEB SERVER , WHICH IS NOT ACCESSIBLE VIA VIP
WHAT COULD BE THE REASONS ? I CAN GIVE MORE DETAIL IF ASK
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
HI @hbac Thanks for your help ....as issue is persist ,
here is configuration
INTERFACES:
edit "SOLUTIONS-2068"
set vdom "root"
set ip 116.0.59.170 255.255.255.252
set allowaccess ping
set alias "SOLUTIONS-VLAN2068"
set role wan
set snmp-index 18
set interface "wan1"
set vlanid 2068
next
edit "TOKO-LAB-VL164"
set vdom "root"
set ip 192.168.160.33 255.255.255.248
set allowaccess ping
set description "Toko-Lab-LAN-Vlan164"
set alias "TOKO-LAB-VLAN164"
set device-identification enable
set role dmz ***********
set snmp-index 17
set interface "internal2"
set vlanid 164
next
end
VIP:
edit "TOKO-LAB"
set uuid 98263e1e-8ac9-51ee-f83c-f15575b592e2
set comment "TOKO-LAB-virtual IP"
set extip 116.0.59.170
set mappedip "192.168.160.34"
set extintf "SOLUTIONS-2068"
next
FIREWALL POLICY:
edit 8
set name "TOKO-LAB-ACCESS-reverse"
set uuid c4e49454-8aca-51ee-bfbb-55b0bfa8a229 //backward
set srcintf "SOLUTIONS-2068"
set dstintf "TOKO-LAB-VL164"
set action accept
set srcaddr "all"
set dstaddr "virtual-ip-for-toko"
set schedule "always"
set service "ALL"
set logtraffic all
set comments "Toko-Lab-Policy"
next
-------------------------------------------------------------------------------
edit 9
set name "TOKO-LAB-forward"
set uuid 9189dad8-8acf-51ee-7d1b-920f73aa447a
set srcintf "TOKO-LAB-VL164"
set dstintf "SOLUTIONS-2068"
set action accept
set srcaddr "all"
set dstaddr "all"
set schedule "always"
set service "ALL"
set logtraffic all
set nat enable
set comments "TOKO-LAB-INTERNET"
next
POLICY ROUTES
config router static
edit 1
set gateway 116.0.55.5
set device "INTERNET-ENOC"
set comment "Default Route"
next
config router policy
edit 8
set input-device "TOKO-LAB-VL164"
set src "0.0.0.0/0.0.0.0"
set dst "0.0.0.0/0.0.0.0"
set gateway 116.0.59.169
set output-device "SOLUTIONS-2068"
set comments "Toko Lab Route"
next
edit 9
set input-device "SOLUTIONS-2068"
set src "0.0.0.0/0.0.0.0"
set dst "0.0.0.0/0.0.0.0"
set gateway 192.168.160.34
set output-device "TOKO-LAB-VL164"
set comments "Internet to TokoLAB Route"
next
You don't have a static route for SOLUTIONS-2068? Please provide the output of this command 'get router info routing-table detail 154.198.114.234'
Regards,
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1547 | |
1031 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.