APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

Fortinet Firewall Virtual IP's

© April 2007 Anthony Lawrence

I found this a little confusing, so am documenting it here in case you run into the same problem.

The first task is to define a virtual IP. You give it a name, and its interface is "wan1" (or "wan2" of course). It's Static NAT, and unfortunately you apparently have to enter an actual IP. I have a DHCP assigned WAN, which will change whenever there is a power failure, so I had hoped to be able to use (for any address), but that didn't work for me. The mapped IP is the internal address you want to go to. In my case, this was a machine in the DMZ, so my first thought was that a WAN1 to DMZ policy was all that would be needed but that's not the case: you need to specifically include the VIP name in the "Address Name".

In my case, the whole thing ended up looking like this:

config firewall vip
edit "Linuxvip"
set extip
set mappedip
set extintf "wan1"


config firewall policy

set srcintf "wan1"
set dstintf "dmz"
set srcaddr "all"
set dstaddr "Linuxvip"
set action accept
set schedule "always"
nameset service "SSH"

Got something to add? Send me email.

(OLDER)    <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

-> Fortinet Firewall Virtual IP's

Inexpensive and informative Apple related e-books:

Take Control of IOS 11

Take Control of Numbers

Take Control of Upgrading to El Capitan

Take Control of Preview

El Capitan: A Take Control Crash Course

More Articles by © Anthony Lawrence

Printer Friendly Version

Have you tried Searching this site?

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us

Printer Friendly Version

If you ask "Should we be in space?" you ask a nonsense question. We are in space. We will be in space. (Frank Herbert)

Linux posts

Troubleshooting posts

This post tagged:




Unix/Linux Consultants

Skills Tests

Unix/Linux Book Reviews

My Unix/Linux Troubleshooting Book

This site runs on Linode