Nat/Route Mode Installation; Preparing To Configure The Fortigate Unit In Nat/Route Mode - Fortinet FortiGate FortiGate-3016B Install Manual

NAT/Route mode installation

NAT/Route mode installation

Preparing to configure the FortiGate unit in NAT/Route mode

32
For the most secure operation, you should change the configuration of the
external interface so that it does not respond to ping requests. Not responding to
ping requests makes it more difficult for a potential attacker to detect your
FortiGate unit from the Internet.
The default public interface is the Port 1 interface.
A FortiGate unit responds to ping requests if ping administrative access is enabled
for that interface.
To disable ping administrative access from the web-based manager
1 Log into the FortiGate web-based manager.
2 Go to System > Network > Interface.
3 Select Edit for Port 1.
4 Clear the Ping Administrative Access check box.
5 Select OK to save the changes.
To disable ping administrative access from the FortiGate CLI
1 Log into the FortiGate CLI.
2 Disable administrative access to the external interface. Enter:
config system interface
edit port1
unset allowaccess
end
This section describes how to install and configure the FortiGate unit in
NAT/Route mode.
Use Table 7 on page 33
NAT/Route mode settings.
You can configure the FortiGate unit in using any of the following methods:
• The web-based manager GUI is a complete interface for configuring most
settings. See "Using the web-based manager" on page
• The command line interface (CLI) is a complete text-based interface for
configuring all settings. See
• The front control buttons and LCD provide access to basic settings. See
the front control buttons and LCD" on page
The method you choose depends on the complexity of the configuration, access
and equipment, and the type of interface you are most comfortable using.
FortiGate-3016B, FortiGate-3600A and FortiGate-3810A FortiOS 3.0 MR5 Install Guide
to gather the information you need to customize
"Using the command line interface" on page
39.
Configuring
34.
36.
"Using
01-30005-0343-20071113