config firewall vip
Configure virtual IP for IPv4.
config firewall vip
Description: Configure virtual IP for IPv4.
edit <name>
set id {integer}
set uuid {uuid}
set comment {var-string}
set type [static-nat|access-proxy]
set extip {user}
set mappedip <range1>, <range2>, ...
set extintf {string}
set arp-reply [disable|enable]
set server-type [http|https|...]
set http-redirect [enable|disable]
set portforward [disable|enable]
set status [disable|enable]
set protocol [tcp|udp|...]
set extport {user}
set mappedport {user}
set gratuitous-arp-interval {integer}
set ssl-certificate {string}
set ssl-dh-bits [768|1024|...]
set ssl-algorithm [high|medium|...]
set ssl-pfs [require|deny|...]
set ssl-min-version [ssl-3.0|tls-1.0|...]
set ssl-max-version [ssl-3.0|tls-1.0|...]
set color {integer}
next
end
config firewall vip
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
name |
Virtual IP name. |
string |
Maximum length: 79 |
|
||||||||||||||||||||
|
id |
Custom defined ID. |
integer |
Minimum value: 0 Maximum value: 65535 |
0 |
||||||||||||||||||||
|
uuid |
Universally Unique Identifier (UUID; automatically assigned but can be manually reset). |
uuid |
Not Specified |
00000000-0000-0000-0000-000000000000 |
||||||||||||||||||||
|
comment |
Comment. |
var-string |
Maximum length: 255 |
|
||||||||||||||||||||
|
type |
Configure between a static NAT and access proxy VIP. |
option |
- |
static-nat |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
extip |
IP address or address range on the external interface that you want to map to an address or address range on the destination network. |
user |
Not Specified |
|
||||||||||||||||||||
|
mappedip |
IP address or address range on the destination network to which the external IP address is mapped. Mapped IP range. |
string |
Maximum length: 79 |
|
||||||||||||||||||||
|
extintf |
Interface connected to the source network that receives the packets that will be forwarded to the destination network. |
string |
Maximum length: 35 |
|
||||||||||||||||||||
|
arp-reply |
Enable to respond to ARP requests for this virtual IP address. Enabled by default. |
option |
- |
enable |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
server-type |
Protocol to be load balanced by the virtual server (also called the server load balance virtual IP). |
option |
- |
|
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
http-redirect |
Enable/disable redirection of HTTP to HTTPS. |
option |
- |
disable |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
portforward |
Enable/disable port forwarding. |
option |
- |
disable |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
status |
Enable/disable VIP. |
option |
- |
enable |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
protocol |
Protocol to use when forwarding packets. |
option |
- |
tcp |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
extport |
Incoming port number range that you want to map to a port number range on the destination network. |
user |
Not Specified |
|
||||||||||||||||||||
|
mappedport |
Port number range on the destination network to which the external port number range is mapped. |
user |
Not Specified |
|
||||||||||||||||||||
|
gratuitous-arp-interval |
Enable to have the VIP send gratuitous ARPs. 0=disabled. Set from 5 up to 8640000 seconds to enable. |
integer |
Minimum value: 5 Maximum value: 8640000 |
0 |
||||||||||||||||||||
|
ssl-certificate |
The name of the certificate to use for SSL handshake. |
string |
Maximum length: 35 |
|
||||||||||||||||||||
|
ssl-dh-bits |
Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. |
option |
- |
2048 |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
ssl-algorithm |
Permitted encryption algorithms for SSL sessions according to encryption strength. |
option |
- |
high |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
ssl-pfs |
Select the cipher suites that can be used for SSL perfect forward secrecy (PFS). Applies to both client and server sessions. |
option |
- |
require |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
ssl-min-version |
Lowest SSL/TLS version acceptable from a client. |
option |
- |
tls-1.1 |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
ssl-max-version |
Highest SSL/TLS version acceptable from a client. |
option |
- |
tls-1.3 |
||||||||||||||||||||
|
|
|
|||||||||||||||||||||||
|
color |
Color of icon on the GUI. |
integer |
Minimum value: 0 Maximum value: 32 |
0 |
||||||||||||||||||||