Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
AsmodSanjuro
New Contributor

Created on ‎03-18-2023 12:59 AM Edited on ‎03-18-2023 01:00 AM

VIP - port 25 on secondary IP

Hello

FG100E with 7.2.4.

We have VIP to hosts lanIP1 and lanIP2 configuration as below with primary and secondary IP:

 

lanIP1:25-------wanPrimIP:25

lanIP1:143-------wanPrimIP:143

lanIP1:465-------wanPrimIP:465

lanIP2:25-------wanSecIP:25

lanIP2:143-------wanSecIP:143

lanIP2:465-------wanSecIP:465

 

Everything works fine with exception: lanIP2:25-------wanSecIP:25

If we change it to: lanIP2:25-------wanSecIP:555 it works, if we disable VIP on port 25 on primary IP and create 

lanIP2:25-------wanPrimIP:25 - also works just fine. Fore some strange reason configuration with two VIP for port 25 is not working - sniffer does not show anything suspisious. Any ideas will be most appriciated - our deadline to set second mail host up and running is near...

 

Labels:
379
0 Kudos
1 REPLY 1
funkylicious
SuperUser
SuperUser

Created on ‎03-18-2023 12:11 PM Edited on ‎03-18-2023 12:12 PM

Crazy idea.

Create a VIP w/ wan secondary to point to wan primary and see if it works.

The fw rule should be srcintf wan to dstintf wan , srcaddr X and dstip VIP

---------------------------
geek
---------------------------
---------------------------geek---------------------------
333
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.