Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

CLI Reference

system vip

The virtual IP addresses are the IP addresses that paired with the domain name of your application. When users visit your application, the destination of their requests are these IP addresses.

You can later attach one or more virtual IP addresses to a virtual server, and then reference the virtual server in a server policy. The web protection profile in the server policy will be applied to all the virtual IPs attached to this virtual server.

Syntax

config system vip

edit <vip_name>

set vip <ip&netmask>

set vip6 <ip&netmask>

set interface <interface_name>

set index <the_index_number>

next

end

Variable Description Default

<vip_name>

Enter a unique name that can be referenced by other parts of the configuration. The maximum length is 63 characters.

No default

vip <ip&netmask>

Enter the IPv4 address and subnet of the virtual IP.

If the FortiWeb appliance is operating in Offline Protection mode or either of the transparent modes, because FortiWeb ignores this IP address when it determines whether or not to apply a server policy to the connection, you can specify any IP address except the address of the web server.

The virtual IP address cannot be the same with the IP address of any one of the interfaces.

0.0.0.0/0
vip6 <ip&netmask>

Enter the IPv6 address and subnet of the virtual IP.

If the FortiWeb appliance is operating in Offline Protection mode or either of the transparent modes, because FortiWeb ignores this IP address when it determines whether or not to apply a server policy to the connection, you can specify any IP address except the address of the web server.

The virtual IP address cannot be the same with the IP address of any one of the interfaces.

::/0
interface <interface_name> Enter the name of the network interface or bridge the virtual IP is bound to and where traffic destined for the virtual IP arrives. port1
index <the_index_number> Enter the index number for this vip. No default

system vip

The virtual IP addresses are the IP addresses that paired with the domain name of your application. When users visit your application, the destination of their requests are these IP addresses.

You can later attach one or more virtual IP addresses to a virtual server, and then reference the virtual server in a server policy. The web protection profile in the server policy will be applied to all the virtual IPs attached to this virtual server.

Syntax

config system vip

edit <vip_name>

set vip <ip&netmask>

set vip6 <ip&netmask>

set interface <interface_name>

set index <the_index_number>

next

end

Variable Description Default

<vip_name>

Enter a unique name that can be referenced by other parts of the configuration. The maximum length is 63 characters.

No default

vip <ip&netmask>

Enter the IPv4 address and subnet of the virtual IP.

If the FortiWeb appliance is operating in Offline Protection mode or either of the transparent modes, because FortiWeb ignores this IP address when it determines whether or not to apply a server policy to the connection, you can specify any IP address except the address of the web server.

The virtual IP address cannot be the same with the IP address of any one of the interfaces.

0.0.0.0/0
vip6 <ip&netmask>

Enter the IPv6 address and subnet of the virtual IP.

If the FortiWeb appliance is operating in Offline Protection mode or either of the transparent modes, because FortiWeb ignores this IP address when it determines whether or not to apply a server policy to the connection, you can specify any IP address except the address of the web server.

The virtual IP address cannot be the same with the IP address of any one of the interfaces.

::/0
interface <interface_name> Enter the name of the network interface or bridge the virtual IP is bound to and where traffic destined for the virtual IP arrives. port1
index <the_index_number> Enter the index number for this vip. No default