Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
makudin
New Contributor

WAN to VLAN

Hi guys, I new in fortigate world. Fortigate is very good. But i have problem. I have Virtual Machine with vlan id 100, and i can ping default gateway of vlan and i have access to internet. Now, i want to use vlan for web services. i am bind virtual ip to vlan host machine, and created policy wan to vlan, but i can' t ping from external ip address. My host ip is 192.168.100.2, Gateway 192.168.100.1 My policy is WAN-->VLAN100 and all services is allow. Can you help me .
2 REPLIES 2
JavBsd
New Contributor II

Hi Makudin, First of all, what FortiOS version you run?. Can you paste the configuration of the VIP object and the firewall policy?. For privacy you can override the external IP address. Regards. Jav.
ede_pfau
SuperUser
SuperUser

As implicated, you have to use a Virtual IP address to access internal hosts from WAN. Please have a look at the docs, FortiOS Handbook, Firewall, Virtual IP for examples how to create a VIP and how to use it in the policy.

Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
Labels
Top Kudoed Authors