Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
segursystem
New Contributor

Virtual IP External IP to Mapped ip range

Hello, thanks for your time in reading my message.

Maybe I have not enough experience with Fortigate. I'm trying to create a Virtual IP where from one external IP to two differents mapped IP in my LAN.

I don't know if this is possible as I receive an error when I define range.

 

Please, see attached image for clarity and thanks again for helping

 

 

Regards

 

virtualip-doubt.png

 

1 Solution
pminarik
Staff
Staff

You will need a load-balance type VIP, which isn't selectable from the GUI, so this needs to be configured in the CLI:

 

config firewall vip

    edit "wwewe"

        set type load-balance

        set extintf any

        set extip 195.55.255.150

        set mappedip 192.168.10.55-192.168.10.59

        set portforward enable
        set protocol udp

        set extport 2000

        set mappedport 2000

end

[ corrections always welcome ]

View solution in original post

5 REPLIES 5
srajeswaran
Staff
Staff

Type Static NAT means its one to one mapping. The number of address in External IP address/range should be equal to the Mapped IP address range.

 Thats the reason for the error you are seeing.

For the configuration you are trying, it looks like load balancing . Are you trying to load balance traffic hitting on 195.55.255.150 port 2000 to 192.168.10.55-192.168.10.59 ? If so please check the following article https://community.fortinet.com/t5/FortiGate/Technical-Tip-Setting-up-a-VIP-load-balance-with-HTTP-ho...

Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
segursystem

Thank you for your reply Suraj.

 

Actually, I think it's simpler since my intention is to open port 2001 to two computers, without the need for load balancing. Maybe I'm taking the wrong path.

 

Thanks again

seshuganesh

You can achieve this using the virtual server instead of port forwarding:

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/713497/virtual-server

Here you can define one external IP and two real servers and configure load balancing as per your requirement

pminarik
Staff
Staff

You will need a load-balance type VIP, which isn't selectable from the GUI, so this needs to be configured in the CLI:

 

config firewall vip

    edit "wwewe"

        set type load-balance

        set extintf any

        set extip 195.55.255.150

        set mappedip 192.168.10.55-192.168.10.59

        set portforward enable
        set protocol udp

        set extport 2000

        set mappedport 2000

end

[ corrections always welcome ]
segursystem

Hi pminarik

 

Thanks, I'll test it and give feedback

 

Regards

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors