Fortinet black logo

FortiVoice Cookbook

Create virtual IP addresses on FortiGate

Copy Link
Copy Doc ID 715f059a-5f8a-11ec-bdf2-fa163e15d75b:263791
Download PDF

Create virtual IP addresses on FortiGate

Create virtual IP addresses to be used for the following port forwarding:

  • WSS port
  • RTP port
  • HTTPS port

To create a virtual IP address for the WSS port (using the TCP protocol)

  1. On FortiGate, go to Policy & Objects > Virtual IPs.
  2. Click Create New > Virtual IP.
  3. Enter a Name to identify this virtual IP address.
  4. Configure the settings.

    Here are example settings:

    • Interface: wan1
    • External IP address/range: 0.0.0.0
    • Mapped IP address/range: IP address of the FortiVoice unit
    • Enable Port Forwarding.
      • Protocol: TCP
      • External port service: 8089
      • Map to port: 8089

  5. To save the changes, click OK.

To create a virtual IP address for the RTP port (encrypted using DTLS and running over UDP)

  1. Click Create New > Virtual IP.
  2. Enter a Name to identify this virtual IP address.
  3. Configure the settings.

    Here are example settings:

    • Interface: wan1
    • External IP address/range: 0.0.0.0
    • Mapped IP address/range: IP address of the FortiVoice unit
    • Enable Port Forwarding.
      • Protocol: UDP
      • External port service: 10000 - 30000
        • Note: For the range of the External port service, make sure to use the same values as the RTP Setting available in System > Advanced > SIP.
      • Map to port: 10000

  4. To save the changes, click OK.

To create a virtual IP address for the HTTPS port

The HTTPS port is used for logging in and downloading call detail records and voicemail messages.

  1. Click Create New > Virtual IP.
  2. Enter a Name to identify this virtual IP address.
  3. Configure the settings.

    Here are example settings:

    • Interface: wan1
    • External IP address/range: 0.0.0.0
    • Mapped IP address/range: IP address of the FortiVoice unit
    • Enable Port Forwarding.
      • Protocol: TCP
      • External port service: 10443
      • Map to port: 443

  4. To save the changes, click OK.

Create virtual IP addresses on FortiGate

Create virtual IP addresses to be used for the following port forwarding:

  • WSS port
  • RTP port
  • HTTPS port

To create a virtual IP address for the WSS port (using the TCP protocol)

  1. On FortiGate, go to Policy & Objects > Virtual IPs.
  2. Click Create New > Virtual IP.
  3. Enter a Name to identify this virtual IP address.
  4. Configure the settings.

    Here are example settings:

    • Interface: wan1
    • External IP address/range: 0.0.0.0
    • Mapped IP address/range: IP address of the FortiVoice unit
    • Enable Port Forwarding.
      • Protocol: TCP
      • External port service: 8089
      • Map to port: 8089

  5. To save the changes, click OK.

To create a virtual IP address for the RTP port (encrypted using DTLS and running over UDP)

  1. Click Create New > Virtual IP.
  2. Enter a Name to identify this virtual IP address.
  3. Configure the settings.

    Here are example settings:

    • Interface: wan1
    • External IP address/range: 0.0.0.0
    • Mapped IP address/range: IP address of the FortiVoice unit
    • Enable Port Forwarding.
      • Protocol: UDP
      • External port service: 10000 - 30000
        • Note: For the range of the External port service, make sure to use the same values as the RTP Setting available in System > Advanced > SIP.
      • Map to port: 10000

  4. To save the changes, click OK.

To create a virtual IP address for the HTTPS port

The HTTPS port is used for logging in and downloading call detail records and voicemail messages.

  1. Click Create New > Virtual IP.
  2. Enter a Name to identify this virtual IP address.
  3. Configure the settings.

    Here are example settings:

    • Interface: wan1
    • External IP address/range: 0.0.0.0
    • Mapped IP address/range: IP address of the FortiVoice unit
    • Enable Port Forwarding.
      • Protocol: TCP
      • External port service: 10443
      • Map to port: 443

  4. To save the changes, click OK.