Fortinet white logo
Fortinet white logo

CLI Reference

config vip

config vip

Description: Configure firewall virtual IPs.

config vip

edit <name>

set comment [255]

set *extip <name1>

set *mappedip <name1>

set *extintf <name1>, <name2>, …

set portforward [enable | disable]

set *protocol <name1>, <name2>, … *only accessible when portforward is enabled

set *extport (1 – 65535) *only accessible when portforward is enabled

set *mappedport (1 – 65535) *only accessible when portforward is enabled

unset

next

show

abort

end

delete <name >

purge

show

end

Sample command:

config firewall vip
  edit 1
    set comment this is a test vip
    set extip 10.153.24.44
    set mappedip 10.153.24.36
    set extintf any
    set portforward enable
    set protocol tcp
    set extport 25
    set mappedport 33
  next
end
Parameer Description Type Size Default
comment Optional comments. string Up to 255 characters in length none
extip IP address on the external interface to be mapped to an address on the destination network. IPv4 address - none
mappedip IP address on the destination network to which the external IP address is mapped. IPv4 address - none
extintf Interface connected to the source network that receives packets to be forwarded to the destination network. option - none
Option Description
lan LAN as the outgoing interface.
lo Loopback as the outgoing interface.
port4 Port 4 as the outgoing interface.
any Any port as the outgoing interface.
portforward Port forwarding. option - disable
Option Decription
enable Enable port forwarding.
disable Disable port forwarding.
protocol Protocol to use when forwarding packets. option - tcp

Option Description
tcp TCP protocol.
udp UDP Protocol.
icmp ICMP protocol.

extport

Incoming port number to be mapped to a port number on the destination network.

number

1 - 65535

0

mappedport

Port number on the destination network to which the external port number is mapped.

number

1 - 65535

0


                                        

config vip

config vip

Description: Configure firewall virtual IPs.

config vip

edit <name>

set comment [255]

set *extip <name1>

set *mappedip <name1>

set *extintf <name1>, <name2>, …

set portforward [enable | disable]

set *protocol <name1>, <name2>, … *only accessible when portforward is enabled

set *extport (1 – 65535) *only accessible when portforward is enabled

set *mappedport (1 – 65535) *only accessible when portforward is enabled

unset

next

show

abort

end

delete <name >

purge

show

end

Sample command:

config firewall vip
  edit 1
    set comment this is a test vip
    set extip 10.153.24.44
    set mappedip 10.153.24.36
    set extintf any
    set portforward enable
    set protocol tcp
    set extport 25
    set mappedport 33
  next
end
Parameer Description Type Size Default
comment Optional comments. string Up to 255 characters in length none
extip IP address on the external interface to be mapped to an address on the destination network. IPv4 address - none
mappedip IP address on the destination network to which the external IP address is mapped. IPv4 address - none
extintf Interface connected to the source network that receives packets to be forwarded to the destination network. option - none
Option Description
lan LAN as the outgoing interface.
lo Loopback as the outgoing interface.
port4 Port 4 as the outgoing interface.
any Any port as the outgoing interface.
portforward Port forwarding. option - disable
Option Decription
enable Enable port forwarding.
disable Disable port forwarding.
protocol Protocol to use when forwarding packets. option - tcp

Option Description
tcp TCP protocol.
udp UDP Protocol.
icmp ICMP protocol.

extport

Incoming port number to be mapped to a port number on the destination network.

number

1 - 65535

0

mappedport

Port number on the destination network to which the external port number is mapped.

number

1 - 65535

0