- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Virtual IP External IP to Mapped ip range
Hello, thanks for your time in reading my message.
Maybe I have not enough experience with Fortigate. I'm trying to create a Virtual IP where from one external IP to two differents mapped IP in my LAN.
I don't know if this is possible as I receive an error when I define range.
Please, see attached image for clarity and thanks again for helping
Regards
Solved! Go to Solution.
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You will need a load-balance type VIP, which isn't selectable from the GUI, so this needs to be configured in the CLI:
config firewall vip
edit "wwewe"
set type load-balance
set extintf any
set extip 195.55.255.150
set mappedip 192.168.10.55-192.168.10.59
set portforward enable
set protocol udp
set extport 2000
set mappedport 2000
end
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Type Static NAT means its one to one mapping. The number of address in External IP address/range should be equal to the Mapped IP address range.
Thats the reason for the error you are seeing.
For the configuration you are trying, it looks like load balancing . Are you trying to load balance traffic hitting on 195.55.255.150 port 2000 to 192.168.10.55-192.168.10.59 ? If so please check the following article https://community.fortinet.com/t5/FortiGate/Technical-Tip-Setting-up-a-VIP-load-balance-with-HTTP-ho...
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you for your reply Suraj.
Actually, I think it's simpler since my intention is to open port 2001 to two computers, without the need for load balancing. Maybe I'm taking the wrong path.
Thanks again
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can achieve this using the virtual server instead of port forwarding:
https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/713497/virtual-server
Here you can define one external IP and two real servers and configure load balancing as per your requirement
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You will need a load-balance type VIP, which isn't selectable from the GUI, so this needs to be configured in the CLI:
config firewall vip
edit "wwewe"
set type load-balance
set extintf any
set extip 195.55.255.150
set mappedip 192.168.10.55-192.168.10.59
set portforward enable
set protocol udp
set extport 2000
set mappedport 2000
end
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi pminarik
Thanks, I'll test it and give feedback
Regards
