Configuring The Fortigate Unit; Planning The Fortigate Configuration; Nat/Route Mode - Fortinet FortiGate FortiGate-1000 Install Manual

Configuring the FortiGate unit

Configuring the FortiGate unit

Planning the FortiGate configuration

NAT/Route mode

FortiGate-200, FortiGate-300, FortiGate-400, FortiGate-500 and FortiGate-1000 FortiOS 3.0 MR4 Install Guide
01-30004-0267-20070215
This section provides an overview of the operating modes of the FortiGate unit.
Before beginning to configure the FortiGate unit, you need to plan how to
integrate the unit into your network. Your configuration plan depends on the
operating mode you select: NAT/Route mode or Transparent mode.
This section includes the following topics:
• Planning the FortiGate configuration
• Preventing the public interface from responding to ping requests
• NAT/Route mode installation
• Transparent mode installation
• Next steps
Before you configure the FortiGate unit, you need to plan how to integrate the unit
into the network. Among other things, you must decide whether you want the unit
to be visible to the network, which firewall functions you want it to provide, and
how you want it to control the traffic flowing between its interfaces.
Your configuration plan depends on the operating mode you select. You can
configure the FortiGate unit in one of two modes: NAT/Route mode (the default)
or Transparent mode.
You can also configure the FortiGate unit and the network it protects using the
default settings.
In NAT/Route mode, the FortiGate unit is visible to the network. Like a router, all
its interfaces are on different subnets. The following interfaces are available in
NAT/Route mode:
Table 12: NAT/Route mode interfaces
FortiGate Unit Internal Interface
FortiGate-200 Internal
FortiGate-300 Internal
FortiGate-400 Port 1
FortiGate-500 Internal
FortiGate-1000 Internal
Planning the FortiGate configuration
External Interface Other
External DMZ
External DMZ/HA
Port 2 Port 3
Port 4/HA
External DMZ/HA
1 to 8
External 1 to 4/HA
31