FortiGate Administration Guide - FirewallShop.com

Firewall Virtual IP
Configuring IP Pools
Configuring IP Pools
To add an IP pool, go to Firewall > Virtual IP > IP Pool.
Figure 209:New Dynamic IP Pool
Name
Enter or change the name for the IP pool.
Interface Select the interface to which to add an IP pool.
IP Range/Subnet Enter the IP address range for the IP pool. The IP range defines the
start and end of an address range. The start of the range must be lower
than the end of the range. The IP range does not have to be on the
same subnet as the IP address of the interface to which the IP pool is
being added.
Double NAT: combining IP pool with virtual IP
When creating a firewall policy, you can use both IP pool and virtual IP for double
IP and/or port translation.
For example, in the following network topology:
• Users in the 10.1.1.0/24 subnet use port 8080 to access server 172.16.1.1.
• The server’s listening port is 80.
• Fixed ports must be used.
Figure 210:Double NAT
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 327