Fortinet white logo
Fortinet white logo

CLI Reference

config vip

config vip

Description: Configure firewall virtual IPs.

config vip

edit <name >

set comment [255]

set *extip <name1>

set *mappedip <name1>

set *extintf <name1>, <name2>, …

set portforward [enable | disable]

set *protocol <name1>, <name2>, … *only accessible when portforward is enabled

set *extport (1 – 65535) *only accessible when portforward is enabled

set *mappedport (1 – 65535) *only accessible when portforward is enabled

unset

next

show

abort

end

delete <name >

purge

show

end

Sample command:

FX201E5919000057 (vip) # show

config firewall vip

edit 1

set comment this is a test vip

set extip 10.153.24.44

set mappedip 10.153.24.36

set extintf any

set portforward enable

set protocol tcp

set extport 25

set mappedport 33

next

end

Parameer Description Type Size Default
comment Optional comments. string Up to 255 characters in length none
extip IP address on the external interface to be mapped to an address on the destination network. IPv4 address - none
mappedip IP address on the destination network to which the external IP address is mapped. IPv4 address - none
extintf Interface connected to the source network that receives packets to be forwarded to the destination network. option - none
Option Description
lan LAN as the outgoing interface.
lo Loopback as the outgoing interface.
lte1 LTE 1 as the outgoing interface.
wan WAN as the outgoing interface.
port4 Port 4 as the outgoing interface.
any Any port as the outgoing interface.
portforward Port forwarding. option - disable
Option Decription
enable Enable port forwarding.
disable Disable port forwarding.
protocol Protocol to use when forwarding packets. option - tcp

Option Description
tcp TCP protocol.
udp UDP Protocol.
icmp ICMP protocol.

extport

Incoming port number to be mapped to a port number on the destination network.

number

1 - 65535

0

mappedport

Port number on the destination network to which the external port number is mapped.

number

1 - 65535

0


                                        

config vip

config vip

Description: Configure firewall virtual IPs.

config vip

edit <name >

set comment [255]

set *extip <name1>

set *mappedip <name1>

set *extintf <name1>, <name2>, …

set portforward [enable | disable]

set *protocol <name1>, <name2>, … *only accessible when portforward is enabled

set *extport (1 – 65535) *only accessible when portforward is enabled

set *mappedport (1 – 65535) *only accessible when portforward is enabled

unset

next

show

abort

end

delete <name >

purge

show

end

Sample command:

FX201E5919000057 (vip) # show

config firewall vip

edit 1

set comment this is a test vip

set extip 10.153.24.44

set mappedip 10.153.24.36

set extintf any

set portforward enable

set protocol tcp

set extport 25

set mappedport 33

next

end

Parameer Description Type Size Default
comment Optional comments. string Up to 255 characters in length none
extip IP address on the external interface to be mapped to an address on the destination network. IPv4 address - none
mappedip IP address on the destination network to which the external IP address is mapped. IPv4 address - none
extintf Interface connected to the source network that receives packets to be forwarded to the destination network. option - none
Option Description
lan LAN as the outgoing interface.
lo Loopback as the outgoing interface.
lte1 LTE 1 as the outgoing interface.
wan WAN as the outgoing interface.
port4 Port 4 as the outgoing interface.
any Any port as the outgoing interface.
portforward Port forwarding. option - disable
Option Decription
enable Enable port forwarding.
disable Disable port forwarding.
protocol Protocol to use when forwarding packets. option - tcp

Option Description
tcp TCP protocol.
udp UDP Protocol.
icmp ICMP protocol.

extport

Incoming port number to be mapped to a port number on the destination network.

number

1 - 65535

0

mappedport

Port number on the destination network to which the external port number is mapped.

number

1 - 65535

0