Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ashok_kumar
New Contributor

VIP problem

Friends,

          I want to access one of our server using the public IP from out side using http.Port enabled the same for 5555 internal.I created VIP and policy for the same 5555 map to 80 but internally X.X.XX:5555 working.From outside public ip X.X.X.X:5555 not working .Its showing only IIS page showing .Please help.Here am attaching log fyi

ashok kumar

Network Engineer

CCNP/MCSA

 

ashok kumar Network Engineer CCNP/MCSA
21 REPLIES 21
ede_pfau
SuperUser
SuperUser

hi,

 

first question: you need to put the VIP into the policy 'wan' -> 'dmz' (or wherever the Citrix server is connected to), source address: 'all', destination address: 'Citrix_VIP' (!). No NAT. Service: 'all' for starters, narrow down later to the service(s) you need.

 

Basically, it's the same setup as with the webserver VIP, only the VIP definition (the 'mapped to port') differs.

 

second question: I've got no idea if licensing prevents the server from answering but I would suspect, yes. Contact the server from your LAN (circumventing the VIP, using a different policy) and see if that works.

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
emnoc
Esteemed Contributor III

FWIW

The VIP has no bearing on the application licensing or lack of.

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors