Fortinet black logo

User Guide

Configuring a virtual IP

Configuring a virtual IP

To configure a virtual IP:
  1. Go to Security > Firewall Objects.
  2. Select Virtual IP in the firewall object type dropdown.
  3. Click Create or select an existing virtual IP from the list and click Edit.
  4. In the form, enter the following information:

    Settings

    Guidelines

    Type

    Select either Virtual IP or Virtual IP Group.

    Note: By default, Virtual IP is selected.

    Name

    Required. Enter a name for the virtual IP or the virtual IP group.

    Comments

    Enter comments about the virtual IP or the virtual IP group.

    Color

    Select the color used for this object in lists.

    Members

    From the dropdown, select members.

    Note: This option is only available if the Type is Virtual IP Group.

    Firewall/Network Options

    Interface

    Select an interface.

    Type

    Select either Static NAT or FQDN.

    Note: By default, Static NAT is selected.

    External IP Address/Range

    Required. Enter the public IP address or range.

    Mapped IPV4 Address/Range

    Required. Enter the IPv4 address or range the traffic is directed to.

    Note: This option is only available when the type is Static NAT.

    Mapped Address

    From the dropdown, select a mapped address.

    Note: This option is only available when the type is FQDN.

    Port Forwarding

    Enable/disable port forwarding.

    Note: This option is disabled by default.

    Protocol

    Select from the following protocols:

    • TCP (default)

    • UDP

    • SCTP

    • ICMP

    Note: This option is only available when Port Forwarding is enabled.

    External Service Port

    Required. Enter the range of the external interface ports.

    Note: This option is only available when Port Forwarding is enabled and the protocol is not ICMP.

    Map to IPv4 Port

    Required. Enter the range of the listening ports.

    Note: This option is only available when Port Forwarding is enabled and the protocol is not ICMP.

    Enable ARP Reply

    Select to enable address resolution protocol (ARP) replies.

    Note: This option is enabled by default.

  5. Click Save.

Configuring a virtual IP

To configure a virtual IP:
  1. Go to Security > Firewall Objects.
  2. Select Virtual IP in the firewall object type dropdown.
  3. Click Create or select an existing virtual IP from the list and click Edit.
  4. In the form, enter the following information:

    Settings

    Guidelines

    Type

    Select either Virtual IP or Virtual IP Group.

    Note: By default, Virtual IP is selected.

    Name

    Required. Enter a name for the virtual IP or the virtual IP group.

    Comments

    Enter comments about the virtual IP or the virtual IP group.

    Color

    Select the color used for this object in lists.

    Members

    From the dropdown, select members.

    Note: This option is only available if the Type is Virtual IP Group.

    Firewall/Network Options

    Interface

    Select an interface.

    Type

    Select either Static NAT or FQDN.

    Note: By default, Static NAT is selected.

    External IP Address/Range

    Required. Enter the public IP address or range.

    Mapped IPV4 Address/Range

    Required. Enter the IPv4 address or range the traffic is directed to.

    Note: This option is only available when the type is Static NAT.

    Mapped Address

    From the dropdown, select a mapped address.

    Note: This option is only available when the type is FQDN.

    Port Forwarding

    Enable/disable port forwarding.

    Note: This option is disabled by default.

    Protocol

    Select from the following protocols:

    • TCP (default)

    • UDP

    • SCTP

    • ICMP

    Note: This option is only available when Port Forwarding is enabled.

    External Service Port

    Required. Enter the range of the external interface ports.

    Note: This option is only available when Port Forwarding is enabled and the protocol is not ICMP.

    Map to IPv4 Port

    Required. Enter the range of the listening ports.

    Note: This option is only available when Port Forwarding is enabled and the protocol is not ICMP.

    Enable ARP Reply

    Select to enable address resolution protocol (ARP) replies.

    Note: This option is enabled by default.

  5. Click Save.