Fortinet Gate 60D, Administration Manual

Page: 369 / 706

Firewall Virtual IP Viewing the virtual IP list
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
369
http://docs.fortinet.com/ • Feedback
VIP requirements
Virtual IPs have the following requirements.
• The Mapped IP Address/Range cannot be 0.0.0.0 or 255.255.255.255.
• The Mapped IP Address/Range must not include any interface IP addresses.
• If the virtual IP is mapped to a range of IP addresses and its type is Static NAT, the
External IP Address/Range cannot be 0.0.0.0.
• When port forwarding, the External IP Address/Range cannot include any other
interface IP addresses.
• When port forwarding, the count of mapped port numbers and external port
numbers must be the same, and the last port number in the range must not exceed
65535.
• Virtual IP names must be different from address or address group names.
• A physical external IP address can be used as the external VIP IP address.
• Duplicate entries or overlapping ranges are not permitted.
Viewing the virtual IP list
To view the virtual IP list, go to Firewall > Virtual IP > Virtual IP .
Figure 224: Virtual IP list
Create New Select to add a virtual IP.
Name The name of the virtual IP.
IP The bound network interface and external IP address or IP address, separated
by a slash (
/
).
Service Port The external port number or port number range. This field is empty if the virtual
IP does not specify port forwarding.
Map to IP/IP
Range The mapped to IP address or address range on the destination network.
Map to Port The mapped to port number or port number range. This field is empty if the
virtual IP does not specify port forwarding.
Delete icon Remove the virtual IP from the list. The Delete icon only appears if the virtual IP
is not selected in a firewall policy.
Edit icon Edit the virtual IP to change any virtual IP option including the virtual IP name.
Delete
Edit