Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
AsmodSanjuro
New Contributor

VIP - port 25 on secondary IP

Hello

FG100E with 7.2.4.

We have VIP to hosts lanIP1 and lanIP2 configuration as below with primary and secondary IP:

 

lanIP1:25-------wanPrimIP:25

lanIP1:143-------wanPrimIP:143

lanIP1:465-------wanPrimIP:465

lanIP2:25-------wanSecIP:25

lanIP2:143-------wanSecIP:143

lanIP2:465-------wanSecIP:465

 

Everything works fine with exception: lanIP2:25-------wanSecIP:25

If we change it to: lanIP2:25-------wanSecIP:555 it works, if we disable VIP on port 25 on primary IP and create 

lanIP2:25-------wanPrimIP:25 - also works just fine. Fore some strange reason configuration with two VIP for port 25 is not working - sniffer does not show anything suspisious. Any ideas will be most appriciated - our deadline to set second mail host up and running is near...

 

1 REPLY 1
funkylicious
Contributor III

Crazy idea.

Create a VIP w/ wan secondary to point to wan primary and see if it works.

The fw rule should be srcintf wan to dstintf wan , srcaddr X and dstip VIP

geek
geek
Labels
Top Kudoed Authors