Fortinet FortiGate Series Administration Manual page 456

Configuring virtual IPs
456
Figure 254: Static NAT virtual IP for an IP address range example
To add a static NAT virtual IP for an IP address range
1 Go to Firewall > Virtual IP > Virtual IP.
2 Select Create New.
3 Use the following procedure to add a virtual IP that allows users on the Internet to
connect to three individual web servers on the DMZ network. In this example, the wan1
interface of the FortiGate unit is connected to the Internet and the dmz1 interface is
connected to the DMZ network.
Figure 255: Virtual IP options: static NAT virtual IP with an IP address range
Name
External Interface
Type
External IP
Address/Range
Mapped IP
Address/Range
4 Select OK.
static_NAT_range
wan1
Static NAT
The Internet IP address range of the web servers.
The external IP addresses are usually static IP addresses obtained
from your ISP for your web server. These addresses must be
unique IP addresses that are not used by another host and cannot
be the same as the IP addresses of the external interface the virtual
IP will be using. However, the external IP addresses must be routed
to the selected interface. The virtual IP addresses and the external
IP address can be on different subnets. When you add the virtual
IP, the external interface responds to ARP requests for the external
IP addresses.
The IP address range of the servers on the internal network. Define
the range by entering the first address of the range in the first field
and the last address of the range in the second field.
FortiGate Version 4.0 MR1 Administration Guide
Firewall Virtual IP
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback