Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

cannot route traffic to virtual ip in another vlan

I would like to ask some questions for my issue.  My firmware version is V7.4.0 Build 2360.

1) I have FortiGate 600F and i made port23 as truck port and configured 2 VLANs on that port. These are. 

  • VLAN 100 ( interface name: vlan100
  • VLAN 51 ( interface name: vlan51

And I make virtual Ip address VIP on VLAN 100 interface, 

  • name: DBVIP
  • interface: vlan100
  • external Ip address:
  • map to (this is my database server)
  • port forwarding: 
  • external service port: TCP 1521
  • Map to Ip v4 port: TCP 1521

My question is that I want to access virtual Ip address from my client in VLAN 51 network.

My problem is that I cannot create firewall rule to access vlan50 to VIP address in vlan100.

How can I do that? 

For firewall policy,

incoming interface: vlan51

outgoing interface: vlan100

source: vlan51 network address

Dest: "VIP of DBVIP in vlan100 network"
service: TCP-1521


But i cannot found VIP of DBVIP destination option in firewall rules.


New Contributor

Any idea for my issue?



Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Top Kudoed Authors