CISCO C1121-4P

[apalacios]

Dear colleagues,

I have a router CISCO C1121-4P. On the network there will be on one side of the router the ISP connection, on the other side there will be a firewall from Forti (This firewall is the device will manage all the traffic). I want to configure NAT on my router in a way that all the input traffic is sent to the Firewall and the outside traffic is sent to the ISP.

Now I am able to connect the CISCO to an ISP on one side and a laptop on the other and I am able to navigate on internet, but when I change the laptop for the firewall, I am not allowed to open the firewall from outside.

The way I want to configure it is like configure Router like 'DMZ' option which is allowed on some ISP routes, which redirect all the traffic to an IP.

Thank you in advance.

[Richard Burts]

There is much that we do not know about your environment and that makes it difficult to give good advice. I would like to focus on this part of your post " I am not allowed to open the firewall from outside" Many firewalls do not allow access from outside. I am not expert on Forti but I am guessing that it does not allow access from outside. As long as the firewall is working and traffic passes through I would not be concerned about access from outside.