WAN to VLAN

[makudin]

Hi guys, I new in fortigate world. Fortigate is very good. But i have problem. I have Virtual Machine with vlan id 100, and i can ping default gateway of vlan and i have access to internet. Now, i want to use vlan for web services. i am bind virtual ip to vlan host machine, and created policy wan to vlan, but i can' t ping from external ip address. My host ip is 192.168.100.2, Gateway 192.168.100.1 My policy is WAN-->VLAN100 and all services is allow. Can you help me .

[JavBsd]

Hi Makudin, First of all, what FortiOS version you run?. Can you paste the configuration of the VIP object and the firewall policy?. For privacy you can override the external IP address. Regards. Jav.

[ede_pfau]

As implicated, you have to use a Virtual IP address to access internal hosts from WAN. Please have a look at the docs, FortiOS Handbook, Firewall, Virtual IP for examples how to create a VIP and how to use it in the policy.