Virtual Ip Groups; Viewing The Vip Group List; Configuring Vip Groups - Fortinet FortiGate Series Administration Manual

Hide thumbs Also See for FortiGate Series:

Table of Contents

Virtual IP Groups

10 Enter the Map to Port number to be added to packets when they are forwarded.

11 Select OK.

You can organize multiple virtual IPs into a virtual IP group to simplify your firewall policy

list. For example, instead of having five identical policies for five different but related virtual

IPs located on the same network interface, you might combine the five virtual IPs into a

single virtual IP group, which is used by a single firewall policy.

Firewall policies using VIP Groups are matched by comparing both the member VIP IP

address(es) and port number(s).

To view the virtual IP group list, go to Firewall > Virtual IP > VIP Group.

Figure 259: VIP Group list

Select to add a new VIP group. See

The name of the virtual IP group.

Lists the group members.

Displays the interface that the VIP group belongs to.

Remove the VIP group from the list. The Delete icon only appears if the VIP

group is not being used in a firewall policy.

Edit the VIP group information, including the group name and membership.

To add a VIP group, go to Firewall > Virtual IP > VIP Group and select Create New. To edit

a VIP group, go to Firewall > Virtual IP > VIP Group and select the Edit icon for the VIP

group to edit. Enter the information as described below, and select OK.

"Configuring VIP groups" on page

FortiGate Version 4.0 MR1 Administration Guide

01-410-89802-20090903

http://docs.fortinet.com/

Firewall Virtual IP