Vip Requirements; Viewing The Virtual Ip List - Fortinet FortiGate Series Administration Manual

Hide thumbs Also See for FortiGate Series:

Table of Contents

Firewall Virtual IP

VIP requirements

FortiGate Version 4.0 MR1 Administration Guide

01-410-89802-20090903

http://docs.fortinet.com/

Virtual IPs have the following requirements.

The Mapped IP Address/Range cannot be 0.0.0.0 or 255.255.255.255.

The Mapped IP Address/Range must not include any interface IP addresses.

If the virtual IP is mapped to a range of IP addresses and its type is Static NAT, the

External IP Address/Range cannot be 0.0.0.0.

When port forwarding, the External IP Address/Range cannot include any other

interface IP addresses.

When port forwarding, the count of mapped port numbers and external port

numbers must be the same, and the last port number in the range must not exceed

Virtual IP names must be different from address or address group names.

A physical external IP address can be used as the external VIP IP address.

Duplicate entries or overlapping ranges are not permitted.

To view the virtual IP list, go to Firewall > Virtual IP > Virtual IP.

Figure 250: Virtual IP list

Select to add a virtual IP.

The name of the virtual IP.

The bound network interface and external IP address or IP address, separated

by a slash (/).

Service Port

The external port number or port number range. This field is empty if the virtual

IP does not specify port forwarding.

Map to IP/IP

The mapped to IP address or address range on the destination network.

The mapped to port number or port number range. This field is empty if the

virtual IP does not specify port forwarding.

Remove the virtual IP from the list. The Delete icon only appears if the virtual IP

is not selected in a firewall policy.

Edit the virtual IP to change any virtual IP option including the virtual IP name.

Viewing the virtual IP list