Command Line Interface; Connecting To The Web-Based Manager - Fortinet FortiGate FortiGate-100A Install Manual

Connecting to the FortiGate unit

Command line interface

Connecting to the web-based manager

18
You can access the FortiGate command line interface (CLI) by connecting a
management computer serial port to the FortiGate serial console connector. You
can also use Telnet or a secure SSH connection to connect to the CLI from any
network that is connected to the FortiGate unit, including the Internet.
Use the following procedure to connect to the web-based manager for the first
time. Configuration changes made with the web-based manager are effective
immediately, without resetting the firewall or interrupting service.
To connect to the web-based manager, you require:
• a computer with an Ethernet connection
• Microsoft Internet Explorer version 6.0 or higher or any recent version of most
popular web browser
• a crossover Ethernet cable or an Ethernet hub with two Ethernet cables
Note: Before starting Internet Explorer, (or any recent version of the most popular web
browser), ping to your FortiGate unit to see if the connection between the computer and the
FortiGate unit is working properly.
To connect to the web-based manager
1 Set the IP address of the computer with an Ethernet connection to the static IP
address 192.168.1.2 with a netmask of 255.255.255.0.
You can also configure the management computer to obtain an IP address
60
automatically using the DHCP. The FortiGate DHCP server assigns the
Series
management computer an IP address in the range 192.168.1.1 to
192.168.1.254.
2 Using the crossover cable or the Ethernet hub and cables, connect the internal
interface of the FortiGate unit to the computer Ethernet connection.
3 Start Internet Explorer and browse to the address https://192.168.1.99.
(remember to include the "s" in https://).
To support a secure HTTPS authentication method, the FortiGate unit ships with a
self-signed security certificate, and is offered to remote clients whenever they
initiate a HTTPS connection to the FortiGate unit. When you connect, the
FortiGate unit displays two security warnings in the browser.
The first warning prompts you to accept and optionally install the FortiGate unit's
self-signed security certificate. If you do not accept the certificate, the FortiGate
unit refuses the connection. If you accept the certificate, the FortiGate login page
appears. The credentials entered are encrypted before they are sent to the
FortiGate unit. If you choose to accept the certificate permanently, the warning is
not displayed again.
Just before the FortiGate login page is displayed, a second warning informs you
that the FortiGate certificate distinguished name differs from the original request.
This warning occurs because the FortiGate unit redirects the connection. This is
an informational message. Select OK to continue logging in.
FortiGate-60 series and FortiGate-100A FortiOS 3.0 MR4 Install Guide
Installing the FortiGate unit
01-30004-0266-20070831