Port Forwarding In FortiGate 100E

[Nelvin]

Hi Everyone,

How to enable the port forwarding for 5000 Synology and port 9999 CCTV ?

My company subscribed dynamic IP from ISP.

Last Friday, the vendor installed Fortigate 100E and he say only Static IP able to set port forwarding..

Could someone save my life?

Thank you.

[ahmedsf]

you must have Synology and CCTV on some subnet, in VIP bind each subnet to one static IP and put the port forwarding. 

[ede_pfau · Accepted solution]

Of course you can get access to your internal hosts even with a dynamic WAN IP.

Bind the WAN IP to a dynDNS name - even Fortinet offers a free dynDNS account.

Then, create a VIP (virtual IP, in 'Network') with external address "0.0.0.0" - as a stand-in for the changing dynamic WAN IP.

Create a policy from WAN to LAN, '0.0.0.0/0' to VIP (!), service whatever_appropriate, no NAT. That's all.

[Nelvin]

I follow your instruction and its work. So much thanks!