Configuring Zones - Fortinet FortiGate Series Administration Manual

Hide thumbs Also See for FortiGate Series:

Table of Contents

Configuring zones

For more information, see config system switch-interface in the

Grouping interfaces and VLAN subinterfaces into zones simplifies policy creation. You can

configure policies for connections to and from a zone, but not between interfaces in a

You can add zones, rename and edit zones, and delete zones from the zone list. When

you add a zone, you select the names of the interfaces and VLAN subinterfaces to add to

Zones are configured from virtual domains. If you have added multiple virtual domains to

your FortiGate configuration, make sure you are configuring the correct virtual domain

before adding or editing zones.

Figure 82: Zone list

Select to create a new zone.

Names of the zones.

Block intra-zone

Displays Yes if traffic between interfaces in the same zone is blocked and No

if traffic between interfaces in the same zone is not blocked.

Interface Members

Names of the interfaces added to the zone. Interface names depend on the

FortiGate model.

Edit/View icons

Edit or view a zone.

Delete a zone.

To configure zone settings

1 Go to System > Network > Zone.

2 Select Create New or select the Edit icon for a zone.

3 Select name, and interfaces.

4 Select OK.

Figure 83: Zone settings

FortiGate CLI

FortiGate Version 4.0 MR1 Administration Guide

01-410-89802-20090903

http://docs.fortinet.com/

System Network