Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
joao_morais
New Contributor

Virtual IP (VIP): extintf vs srcintf-filter

Hi everyone,

 

From the 5.6 docs:

 

extintf: Interface connected to the source network that receives the packets that will be forwarded to the destination network srcintf-filter: Interfaces to which the VIP applies. Separate the names with spaces.

 

Quite similar definitions. From a practical standpoint however it seems like extintf is used for configuration purposes namely to define if the VIP can be used in a policy, while srcintf-filter is used to actual decide whether a DNAT is applied or not.

 

Is this correct or am I missing something?

 

Thank you in advance.

0 REPLIES 0
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors