ONE DNAT NOT WORKING , ALTHOUGHT OTHER DNAT IS WORKING ON FORTIGATE

[faizneer]

- ONE DEFAULT ROUTE FOR INTERNET WORKING ...

- 2 POLICY BASED ROUTES FOR EACH VM , ONE FOR FORWARD ONR FOR BACKWARD ...

- 1 POLICY FOR LAN TO WAN FOR INTERNET

- 2 POLICIES FOR EACH VM , ONE FOR FORWARD AND SECOND FOR BACKWARD

- VIP IS USED FOR EACH VM

- ONE SERVER IS SIP SERVER , WHICH IS WORKING FINE , INGOING AND OUTGOING 

- ONE SERVER IS WEB SERVER , WHICH IS NOT ACCESSIBLE VIA VIP 

WHAT COULD BE THE REASONS ? I CAN GIVE MORE DETAIL IF ASK 

[faizneer]

HI @hbac  Thanks for your help ....as issue is persist ,

here is configuration 

INTERFACES:

edit "SOLUTIONS-2068"
set vdom "root"
set ip 116.0.59.170 255.255.255.252
set allowaccess ping
set alias "SOLUTIONS-VLAN2068"
set role wan
set snmp-index 18
set interface "wan1"
set vlanid 2068
next

edit "TOKO-LAB-VL164"
set vdom "root"
set ip 192.168.160.33 255.255.255.248
set allowaccess ping
set description "Toko-Lab-LAN-Vlan164"
set alias "TOKO-LAB-VLAN164"
set device-identification enable
set role dmz ***********
set snmp-index 17
set interface "internal2"
set vlanid 164
next
end

VIP:

edit "TOKO-LAB"
set uuid 98263e1e-8ac9-51ee-f83c-f15575b592e2
set comment "TOKO-LAB-virtual IP"
set extip 116.0.59.170
set mappedip "192.168.160.34"
set extintf "SOLUTIONS-2068"
next

FIREWALL POLICY:

edit 8
set name "TOKO-LAB-ACCESS-reverse"
set uuid c4e49454-8aca-51ee-bfbb-55b0bfa8a229 //backward
set srcintf "SOLUTIONS-2068"
set dstintf "TOKO-LAB-VL164"
set action accept
set srcaddr "all"
set dstaddr "virtual-ip-for-toko"
set schedule "always"
set service "ALL"
set logtraffic all
set comments "Toko-Lab-Policy"
next
-------------------------------------------------------------------------------
edit 9
set name "TOKO-LAB-forward"
set uuid 9189dad8-8acf-51ee-7d1b-920f73aa447a
set srcintf "TOKO-LAB-VL164"
set dstintf "SOLUTIONS-2068"
set action accept
set srcaddr "all"
set dstaddr "all"
set schedule "always"
set service "ALL"
set logtraffic all
set nat enable
set comments "TOKO-LAB-INTERNET"
next

POLICY ROUTES

config router static
edit 1
set gateway 116.0.55.5
set device "INTERNET-ENOC"
set comment "Default Route"
next

config router policy
edit 8
set input-device "TOKO-LAB-VL164"
set src "0.0.0.0/0.0.0.0"
set dst "0.0.0.0/0.0.0.0"
set gateway 116.0.59.169
set output-device "SOLUTIONS-2068"
set comments "Toko Lab Route"
next
edit 9
set input-device "SOLUTIONS-2068"
set src "0.0.0.0/0.0.0.0"
set dst "0.0.0.0/0.0.0.0"
set gateway 192.168.160.34
set output-device "TOKO-LAB-VL164"
set comments "Internet to TokoLAB Route"
next

[hbac]

@faizneer,

You don't have a static route for SOLUTIONS-2068? Please provide the output of this command 'get router info routing-table detail 154.198.114.234'

Regards,