Configuring virtual IPs
Firewall Virtual IP
FortiGate Version 4.0 Administration Guide
374
01-400-89802-20090424
Figure 228: Static NAT virtual IP for an IP address range example
To add a static NAT virtual IP for an IP address range
1
Go to
Firewall > Virtual IP > Virtual IP
.
2
Select
Create New
.
3
Use the following procedure to add a virtual IP that allows users on the Internet to
connect to three individual web servers on the DMZ network. In this example, the wan1
interface of the FortiGate unit is connected to the Internet and the dmz1 interface is
connected to the DMZ network.
Figure 229: Virtual IP options: static NAT virtual IP with an IP address range
4
Select
OK
.
Name
static_NAT_range
External Interface
wan1
Type
Static NAT
External IP
Address/Range
The Internet IP address range of the web servers.
The external IP addresses are usually static IP addresses obtained
from your ISP for your web server. These addresses must be
unique IP addresses that are not used by another host and cannot
be the same as the IP addresses of the external interface the virtual
IP will be using. However, the external IP addresses must be routed
to the selected interface. The virtual IP addresses and the external
IP address can be on different subnets. When you add the virtual
IP, the external interface responds to ARP requests for the external
IP addresses.
Mapped IP
Address/Range
The IP address range of the servers on the internal network. Define
the range by entering the first address of the range in the first field
and the last address of the range in the second field.
Summary of Contents for Gate 60D
Page 705: ...www fortinet com...
Page 706: ...www fortinet com...
