Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Not applicable

access server public ip from internet

I have configured Virtual IP (port forwading) on my fortigate firewall but still i cannot access my server from internet via its public ip. Here is my configuration 1. Inside the " root" vdom i created a virtual ip: Name: Server1 External Interface: WAN1 Type: Static NAT External IP: Public IP Mapped IP: Private IP Port Forwarding: <checked> External Service Port: 8080 Map to Port: 8080 2. Firewall Policy Source interface: WAN1 Source address: all Destination interface: Internal Destination address: Server1 Schedule: always Service: any Action: Accept I have also performed the following troubleshooting process: 1. From Fortinet firewall ping server private ip - successful! 2. From a workstation command prompt telnet <private ip> 8080 - successful (port 8080 of server is open) Can anyone help me point out what else is missing? Does a DNS server has something to do with this?
2 REPLIES 2
Carl_Wallmark
Valued Contributor

Hi and welcome, Your configuration seems to be correct, You can check a few things: 1. Policy order, when creating new policys, your policy always shows up at the bottom, check so you dont have a DENY rule above. 2. In your VIP, check to see if you selected TCP and not UDP. 3. Make sure your server has the FortGate as default gateway.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
Not applicable

Hi and welcome, Your configuration seems to be correct, You can check a few things: 1. Policy order, when creating new policys, your policy always shows up at the bottom, check so you dont have a DENY rule above. 2. In your VIP, check to see if you selected TCP and not UDP. 3. Make sure your server has the FortGate as default gateway.
Thanks for your response! 1. Ill check on item no. 1. 2. I selected TCP. 3. Yes, Server Default gateway is the port on Fortigate.
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors