Allow VIP with port forwarding to permit ICMP
When a VIP is defined with port forwarding enabled, ICMP (PING) to the mapped IP can be allowed.
Syntax
config firewall vip
edit "VIP"
set extip xxx.xxx.xxx.xxx
set extintf "wan1"
set portforward enable
set mappedip xxx.xxx.xxx.xxx
set protocol icmp
next
end
The command set protocol has icmp option now to make the firewall forward ICMP to the host specified by mappedip while the mappedport and extport attributes are skipped.