! PermitANY — Fortinet FortiGate NAT Configuration
! Central SNAT (source NAT pool), VIP (virtual IP / DNAT port-forwarding), and NAT policies for FortiGate firewalls.
! Generated: 2026-09-20
! These are EXAMPLE values. Replace with your actual config before deploying.
!
# FortiGate NAT Configuration — FGT-EDGE-01
!
config firewall ippool

    edit "POOL-PUBLIC"
        set type overload
        set startip 203.0.113.10
        set endip 203.0.113.20
    next

end
!
config firewall vip

    edit "VIP-HTTPS-WebServer"
        set extip 203.0.113.10
        set extintf "port1"
        set mappedip 192.168.1.10

    next

end
!
config firewall central-snat-map

    edit 1
        set srcintf "port2"
        set dstintf "port1"
        set orig-addr "Corp-LAN"
        set dst-addr "all"
        set nat enable
        set nat-ippool "POOL-PUBLIC"
    next

end