• All Files

Home > Online Help

Virtual IP groups

Just like other address, Virtual IP addresses can be organized into groups for ease of administration. If you have multiple virtual IPs that are likely to be associated to common firewall policies rather than add them individually to each of the policies you can add the instead. That way, if the members of the group change then any changes made to the group will propagate to all of the policies using that group.

When using a Virtual IP address group the firewall policy will take into account all of the configured parameters of the Virtual IPs: IP addresses, Ports and port types.

Creating a virtual IP group

1. Go to Policy & Objects > Objects > Virtual IPs.
2. Use the down arrow next to Create New, select Virtual IP Group.
3. Select the Type fo VIP group you wish to create.
   The options available are:

1. IPv4 VIP - IPv4 on both sides of the FortiGate Unit.
2. IPv6 VIP - IPv6 on both sides of the FortiGate Unit.
3. NAT46 VIP - Going from an IPv4 Network to an IPv6 Network.
4. NAT64 VIP - Going from an IPv6 Network to an IPv4 Network.

Which is chosen will depend on which of the IP version networks is on the external interface of the FortiGate unit and which is on the internal interface.The options will be:

4. Enter a Name for the VIP
5. Enter any additional information in the Comments field.
6. Use the dropdown menu of the Interface field to select the interface that the member VIPs are associated with, if any.
7. Use the dropdown menu fo the Members field to select the VIPs that will be part of the group.
8. Press OK.