FortiGate Administration Guide - FirewallShop.com

Firewall Virtual IP
Configuring virtual IPs
The virtual IP list has the following icons and features:
Create New
Name
IP
Service Port
Map to IP/IP
Range
Map to Port
Delete icon
Edit icon
Select to add a virtual IP.
The name of the virtual IP.
The external IP address or IP address range.
The external port number or port number range. The service port is
included in port forwarding virtual IPs.
The mapped to IP address or address range on the destination network.
The mapped to port number or port number range. The map to port is
included in port forwarding virtual IPs.
Remove the virtual IP from the list. The Delete icon only appears if the
virtual IP is not being used in a firewall policy.
Edit the virtual IP to change any virtual IP option including the virtual IP
name.
Configuring virtual IPs
To add a virtual IP, go to Firewall > Virtual IP > Virtual IP and select Create new.
To edit a virtual IP, go to Firewall > Virtual IP > Virtual IP and select the Edit icon
for the virtual IP to edit.
Name
Enter or change the name to identify the virtual IP. To avoid confusion,
firewall policies, addresses, address groups, and virtual IPs cannot
share names.
External Interface Select the virtual IP external interface from the list. The external
interface is connected to the source network and receives the packets
to be forwarded to the destination network. You can select any
FortiGate interface, VLAN subinterface, or VPN interface.
Type
External IP
Address/Range
Mapped IP
Address/Range
Select Static NAT or Server Load Balance. For details about VIP
types, see “How virtual IPs map connections through the FortiGate
unit” on page 305.
Enter the external IP address that you want to map to an address on
the destination network.
To configure a dynamic virtual IP that accepts connections for any IP
address, set the external IP address to 0.0.0.0. For a static NAT
dynamic virtual IP you can only add one mapped IP address. For a
load balance dynamic virtual IP you can specify a single mapped
address or a mapped address range.
Enter the real IP address on the destination network to which the
external IP address is mapped.
You can also enter an address range to forward packets to multiple IP
addresses on the destination network.
For a static NAT virtual IP, if you add a mapped IP address range the
FortiGate unit calculates the external IP address range and adds the
IP address range to the External IP Address/Range field.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 309