Creating virtual IP addresses on FortiGate

Create virtual IP addresses to be used for the following port forwarding:

• WSS port
• RTP port
• HTTPS port

To create a virtual IP address for the WSS port (using the TCP protocol)

1. On FortiGate, go to Policy & Objects > Virtual IPs.
2. Click Create New > Virtual IP.
3. Enter a Name to identify this virtual IP address.
4. Configure the settings.

   Here are example settings:

   • Interface: wan1
   • External IP address/range: 0.0.0.0
   • Mapped IP address/range: IP address of the FortiVoice unit
   • Enable Port Forwarding.
     • Protocol: TCP
     • External port service: 8089
     • Map to port: 8089

       

5. To save the changes, click OK.

To create a virtual IP address for the RTP port (encrypted using DTLS and running over UDP)

7. Click Create New > Virtual IP.
8. Enter a Name to identify this virtual IP address.
9. Configure the settings.

   Here are example settings:

   • Interface: wan1
   • External IP address/range: 0.0.0.0
   • Mapped IP address/range: IP address of the FortiVoice unit
   • Enable Port Forwarding.
     • Protocol: UDP
     • External port service: 10000 - 30000
       • Note: For the range of the External port service, make sure to use the same values as the RTP Setting available in System > Advanced > SIP.
     • Map to port: 10000

       

10. To save the changes, click OK.

To create a virtual IP address for the HTTPS port

The HTTPS port is used for logging in and downloading call detail records and voicemail messages.

11. Click Create New > Virtual IP.
12. Enter a Name to identify this virtual IP address.
13. Configure the settings.

    Here are example settings:

    • Interface: wan1
    • External IP address/range: 0.0.0.0
    • Mapped IP address/range: IP address of the FortiVoice unit
    • Enable Port Forwarding.
      • Protocol: TCP
      • External port service: 10443
      • Map to port: 443

        

14. To save the changes, click OK.