![nat-la-gi-1-nat-cho-phep-chuyen-doi-dia-chi-ip-cuc-bo-thanh-dia-chi-ip-ngoai-mien-1200x675](https://static.techbast.com/2020/10/nat-la-gi-1-nat-cho-phep-chuyen-doi-dia-chi-ip-cuc-bo-thanh-dia-chi-ip-ngoai-mien-1200x675-1-678x381.jpg)
Overview
The article show how to configure NAT port for switchboard on Fortigate device, so that outside the Internet can phone to the internal system
Here I use the Panasonic Voip switchboard
Port Switchboard is 5060 but because port 5060 is a spam port, the switchboard will change port public to the outside is port 31303
Port Voice of the switchboard is the port range 16000 to 16500
Diagram
![](https://uploads.thegioifirewall.com/image-1453-1024x325.png)
How to configure
- Login to Fortigate device by Admin account
![](https://uploads.thegioifirewall.com/image-1445-1024x484.png)
- Go to Policy and Objects -> Choose Virtual IPs -> Click Create New -> Choose Virtual IP
![](https://uploads.thegioifirewall.com/image-1446-1024x487.png)
NAT for switchboard
- In Name: Enter Name for NAT rule
- In Interface: Choose Interface WAN
- In External IP address/range: Enter IP WAN
- In Mapped IP address/range: Enter IP of switch board
- Enable Port Forwarding
- In Protocol: Choose UDP
- In External service port: Enter 31303
- In Map to port: Enter 31303
-> Click OK
![](https://uploads.thegioifirewall.com/image-1450-1024x484.png)
Create NAT rule for Voice
- In External service port: Enter 16000-16500
- In Map to port: Enter 16000
![](https://uploads.thegioifirewall.com/image-1451-1024x487.png)
Leave a Reply