Fortinet white logo
Fortinet white logo

Administration Guide

Create or edit a virtual IP

Create or edit a virtual IP

Select Create New > Virtual IP to open the Create Virtual IP window.

To open the Edit Virtual IP window, select an address and then click Edit.

Configure the following settings in the Create Virtual IP window or the Edit Virtual IP window and then click OK:

Name

Enter a unique name for the virtual IP.

Comments

Optionally, enter a description of the virtual IP.

Interface

Select the interface to which you want to bind the virtual IP. Select any if you want to bind the virtual IP with the interface when you create a policy.

Port Forwarding

Enable or disable. If only the traffic for a specific port or port range is being forwarded, enable this setting.

Protocol

Select TCP, UDP, SCTP, or ICMP for the virtual IP to use.

External service port

Enter a port number or a range of port numbers, separated by a hyphen.

This is the port(s) on the external interface of the FortiProxy (the destination port in the header of the packets).

Map to port

Enter the port number.

This will be the listening port on the device located on the internal side of the network. It does not have to be the same as the external service port.

API Preview

The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview. This feature is not available if the user is logged in as an administrator that has read-only GUI permissions.

To use the API Preview:
  1. Click API Preview. The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.

  2. Enable Show modified changes only to show the modified changes instead of the full configuration in the preview.

  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.

  4. Click Close to leave the preview.

To create a virtual IP in the CLI:

config firewall vip

edit "Internal_WebServer"

set extip 10.1.100.199

set extintf "any"

set mappedip "172.16.200.55"

next

end

Create or edit a virtual IP

Create or edit a virtual IP

Select Create New > Virtual IP to open the Create Virtual IP window.

To open the Edit Virtual IP window, select an address and then click Edit.

Configure the following settings in the Create Virtual IP window or the Edit Virtual IP window and then click OK:

Name

Enter a unique name for the virtual IP.

Comments

Optionally, enter a description of the virtual IP.

Interface

Select the interface to which you want to bind the virtual IP. Select any if you want to bind the virtual IP with the interface when you create a policy.

Port Forwarding

Enable or disable. If only the traffic for a specific port or port range is being forwarded, enable this setting.

Protocol

Select TCP, UDP, SCTP, or ICMP for the virtual IP to use.

External service port

Enter a port number or a range of port numbers, separated by a hyphen.

This is the port(s) on the external interface of the FortiProxy (the destination port in the header of the packets).

Map to port

Enter the port number.

This will be the listening port on the device located on the internal side of the network. It does not have to be the same as the external service port.

API Preview

The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview. This feature is not available if the user is logged in as an administrator that has read-only GUI permissions.

To use the API Preview:
  1. Click API Preview. The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.

  2. Enable Show modified changes only to show the modified changes instead of the full configuration in the preview.

  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.

  4. Click Close to leave the preview.

To create a virtual IP in the CLI:

config firewall vip

edit "Internal_WebServer"

set extip 10.1.100.199

set extintf "any"

set mappedip "172.16.200.55"

next

end