Fortinet Gate 60D, Руководство администратора

Страница: 374 / 706

Configuring virtual IPs Firewall Virtual IP
FortiGate Version 4.0 Administration Guide
374 01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
Figure 228: Static NAT virtual IP for an IP address range example
To add a static NAT virtual IP for an IP address range
1 Go to Firewall > Virtual IP > Virtual IP .
2 Select Create New .
3 Use the following procedure to add a virtual IP that allows users on the Internet to
connect to three individual web servers on the DMZ network. In this example, the wan1
interface of the FortiGate unit is connected to the Internet and the dmz1 interface is
connected to the DMZ network.
Figure 229: Virtual IP options: static NAT virtual IP with an IP address range
4 Select OK .
Name static_NAT_range
External Interface wan1
Type Static NAT
External IP
Address/Range The Internet IP address range of the web servers.
The external IP addresses are usually static IP addresses obtained
from your ISP for your web server. These addresses must be
unique IP addresses that are not used by another host and cannot
be the same as the IP addresses of the external interface the virtual
IP will be using. However, the external IP addresses must be routed
to the selected interface. The virtual IP addresses and the external
IP address can be on different subnets. When you add the virtual
IP, the external interface responds to ARP requests for the external
IP addresses.
Mapped IP
Address/Range The IP address range of the servers on the internal network. Define
the range by entering the first address of the range in the first field
and the last address of the range in the second field.