Adding Policies With Virtual Ips - Fortinet FortiGate FortiGate-800 Installation And Configuration Manual

Virtual IPs

Adding policies with virtual IPs

212
Figure 48: Adding a port forwarding virtual IP
Use the following procedure to add a policy that uses a virtual IP to forward packets.
To add a policy with a virtual IP
1 Go to Firewall > Policy.
2 Select the type of policy that you want to add.
• The source interface must match the interface selected in the External Interface
list.
• The destination interface must match the interface connected to the network with
the Map to IP address.
3 Use the following information to configure the policy.
Source
Destination
Schedule
Service
Action
NAT
Select the source address from which users can access the server.
Select the virtual IP.
Select a schedule as required.
Select the service that matches the Map to Service that you selected
for the port-forwarding virtual IP.
Set action to ACCEPT to accept connections to the internal server.
You can also select DENY to deny access.
Select NAT if the firewall is protecting the private addresses on the
destination network from the source network.
Firewall configuration
Fortinet Inc.