Adding Dynamic Virtual Ips - Fortinet Fortigate-5000 series Administration Manual

Configuring virtual IPs

Adding dynamic virtual IPs

266
Real Servers
Port Forwarding
Protocol
External Service Port
Map Port
4 Select OK.
To add a load balance virtual IP for an IP address range to a firewall policy
Add a external to dmz1 firewall policy that uses the virtual IP so that when users
on the Internet attempt to connect to the web server IP address packets pass
through the FortiGate unit from the external interface to the dmz1 interface. The
virtual IP translates the destination address of these packets from the external IP
to the dmz network IP addresses of the web servers.
1 Go to Firewall > Policy and select Create New.
2 Configure the firewall policy:
Source Interface/Zone
Source Address Name
Destination Interface/Zone dmz1
Destination Address Name Load_Bal_VIP_port_forward
Schedule
Service
Action
3 Select NAT.
4 Select OK.
Adding a dynamic virtual IP is similar to adding a virtual IP. The difference is that
the External IP address must be set to 0.0.0.0 so the External IP address matches
any IP address.
To add a dynamic virtual IP
1 Go to Firewall > Virtual IP > Virtual IP.
2 Select Create New.
3 Enter a name for the dynamic virtual IP.
4 Select the virtual IP External Interface from the list.
The external interface is connected to the source network and receives the
packets to be forwarded to the destination network.
Select any firewall interface or a VLAN subinterface.
If you select Server Load Balancing for the VIP type, enter
the real server IP addresses. For details about real server
settings, see "Configuring virtual IPs" on page
Selected
TCP
The ports that traffic from the Internet will use. For a web
server, this will typically be port 80.
The ports on which the server expects traffic. Define the
range by entering the first port of the range in the first field
and the last port of the range in the second field. If there is
only one port, leave the second field blank.
external
All (or a more specific address)
always
HTTP
ACCEPT
FortiGate Version 3.0 MR4 Administration Guide
Firewall Virtual IP
255.
01-30004-0203-20070102