ssh port forwarding

[janwalczuk]

As a new member I'd like to day hello to everyone. Thanks for accepting my registration form. :)

And now...

I'm in the middle of moving our nfrastructure from OVH to other operator. I'm using physical servers (i.e. three nodes) and FortiGate 30E. 

I was trying for start forward traffic from FortiGate WAN IP to all tree nodes:

WAN: 12.23.34.45

LAN1: 192.168.0.1

LAN2: 192.168.0.2

LAN3: 192.168.0.3

I wanted to use ports:

10221

10222

10223

and forward them to SSH ports inside my minui cluster.

I was using fortinet cookbook http://cookbook.fortinet.com/using-virtual-ips-configure-port-forwarding-54/

Configuraton was accepted, but there are no new ports opened od WAN interface (scanned this IP). 

Also output from CLI:

FGW01 # 
FGW01 # diag sniffer packet any "tcp and dst port 10221"
interfaces=[any]
filters=[tcp and dst port 10221]
14.534289 1.2.3.4.19597 -> 12.23.34.45.10221: syn 2492440027 
15.533847 1.2.3.4.19597 -> 12.23.34.45.10221: syn 2492440027 
17.509812 1.2.3.4.19597 -> 12.23.34.45.10221: syn 2492440027 
21.534165 1.2.3.4.19597 -> 12.23.34.45.10221: syn 2492440027 
26.533814 1.2.3.4.19597 -> 12.23.34.45.10221: rst 2492440028 ack 0

I'm using FortiGate 30E with firmware v5.4.5,build1138 (GA). Are there any other requirements to make it work? Are there any known to You issues with this firmware? Or is there sth wrong with this cookbook?

Best regards,

Jan

[janwalczuk]

OK, nevermind. I'm stupid. I've created separate service for this (instead using already existing SSH service) with disabled NAT.

Problem solved.