Hello,
I am working on deploying a VIP on a FWF60D device, and I am having trouble. I've setup the vip as I believe it should be, its should be forwarding all traffic to the device on mapped IP 10.10.10.21 from the public IP 64.121.5.85. The wan 1 address is 64.121.5.82. I have seen this work in the past, but it's just not working right now. I have put my config details below, Hopefully someone can point out what I am doing wrong.
Thank you
My details:
config firewall vip
edit "DVRincomingVIP"
set extip 64.121.5.85
set extintf "wan1"
set mappedip "10.10.10.21"
next
end
config firewall policy
edit 77
set srcintf "wan_zone"
set dstintf "dmz"
set srcaddr "all"
set dstaddr "DVRincomingVIP"
set action accept
set schedule "always"
set service "ALL"
next
end
config system interface
edit "wan1"
set vdom "root"
set ip 64.121.5.82 255.255.255.248
set allowaccess ping ssh
set vlanforward enable
set type physical
set snmp-index 3
next
end
config router static
edit 4
set gateway 64.121.5.81
set device "wan1"
next
end
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Off the top of my head I would agree that it looks right (though we are missing your DMZ interface config), but I'm also thinking maybe the extintf property is wrong on the VIP object.
I have always used "any" for the interface for my VIP objects...maybe try that?
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1662 | |
1077 | |
752 | |
443 | |
220 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.