Dynamic VIP according to DNS translation
When a dynamic virtual IP is used in a policy, the dynamic DNS translation table is installed along with the dynamic NAT translation table into the kernel. All matched DNS responses will be translated and recorded regardless if they hit the policy. When a client request hits the policy, dynamic NAT translation will occur if it matches a record, otherwise the traffic will be blocked.
config firewall vip edit “1” set type dns-translation set extip 192.168.0.1-192.168.0.100
set extintf “dmz” set dns-mapping-ttl 604800 set mappedip “18.104.22.168/24” “22.214.171.124/24” end end
Having trouble configuring your Fortinet hardware or have some questions you need answered? Ask your questions in the comments below!!! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!
Don't Forget To Buy Your Fortinet Hardware From The Fortinet GURU