FortiGate Administration Guide - FirewallShop.com

Virtual IP Groups
Firewall Virtual IP
10 Enter the Map to Port number to be added to packets when they are forwarded.
Enter the same number as the External Service Port if the port is not to be
translated.
11 Select OK.
Adding a virtual IP with port translation only
When adding a virtual IP, if you enter the virtual IP address as same as the
mapped IP address and use port forwarding, the destination IP address will not be
changed, but the port number will be changed as you specify.
To add a virtual IP with port translation only
1 Go to Firewall > Virtual IP > Virtual IP.
2 Select Create New.
3 Enter a name for the dynamic virtual IP.
4 Select the virtual IP External Interface from the list.
The external interface is connected to the source network and receives the
packets to be forwarded to the destination network.
Select any firewall interface or a VLAN subinterface.
5 Set the External IP Address as the mapped IP address.
6 Enter the Map to IP address to which to map the external IP address. For
example, the IP address of a PPTP server on an internal network.
7 Select Port Forwarding.
8 For Protocol, select TCP.
9 Enter the External Service Port number for which to configure dynamic port
forwarding.
The external service port number must match the destination port of the packets
to be forwarded. For example, if the virtual IP provides PPTP passthrough access
from the Internet to a PPTP server, the external service port number should be
1723 (the PPTP port).
10 Enter the Map to Port number to be added to packets when they are forwarded.
11 Select OK.
Virtual IP Groups
You can create virtual IP groups to facilitate firewall policy traffic control. For
example, on the DMZ interface, if you have two email servers that use Virtual IP
mapping, you can put these two VIPs into one VIP group and create one externalto-DMZ
policy, instead of two policies, to control the traffic.
Viewing the VIP group list
To view the virtual IP group list, go to Firewall > Virtual IP > VIP Group.
FortiGate Version 3.0 MR5 Administration Guide
322 01-30005-0203-20070830