FortiGate Administration Guide - FirewallShop.com

Configuring virtual IPs
Firewall Virtual IP
To add a server load balance virtual IP
1 Go to Firewall > Virtual IP > Virtual IP.
2 Select Create New.
3 Use the following procedure to add a virtual IP that allows users on the Internet to
connect to a web server on the DMZ network. In our example the external
interface of the FortiGate unit is connected to the Internet and the dmz1 interface
is connected to the DMZ network.
Name
Load_Bal_VIP
External Interface external
Type
Server Load Balance
External IP address/Range The public IP addresses of the web servers.
The external IP address must be a static IP address obtained
from your ISP for your web server. This address must be a
unique IP address that is not used by another host and
cannot be the same as the IP address of the external
interface the virtual IP will be using. However, the external IP
address must be routed to the selected interface. The virtual
IP address and the external IP address can be on different
subnets. When you add the virtual IP, the external interface
responds to ARP requests for the external IP address.
Method
Select one of the load balance methods. For details, see
“Configuring virtual IPs” on page 309.
Real Servers
If you select Server Load Balancing for the VIP type, enter
the real server IP addresses. For details about real server
settings, see “Configuring virtual IPs” on page 309.
Figure 203:Virtual IP options; server load balancing virtual IP
4 Select OK.
FortiGate Version 3.0 MR5 Administration Guide
318 01-30005-0203-20070830