Interfaces; Vlan Subinterfaces; Zones - Fortinet FortiGate FortiGate-800 Installation And Configuration Manual

Firewall configuration

Interfaces

VLAN subinterfaces

Zones

FortiGate-800 Installation and Configuration Guide
Add policies to control connections between FortiGate interfaces and between the
networks connected to these interfaces. By default, you can add policies for
connections that include the internal, external, and DMZ interfaces.
To add policies that include the port1 to port4 interfaces, you must use the following
steps to add these interfaces to the firewall policy grid:
1 If they are down, start the interfaces up.
See "Changing the administrative status of an interface" on page
2 Add IP addresses to the interfaces.
See "Configuring interfaces" on page
3 Add firewall addresses for these interfaces.
See "Adding addresses" on page
You can also add VLAN subinterfaces to the FortiGate configuration to control
connections between VLANs. For more information about VLANs, see
NAT/Route mode" on page 146
page 147.
To add policies that include VLAN subinterfaces, you must use the following steps to
add the VLAN subinterfaces to the firewall policy grid:
1 Add VLAN subinterfaces to the FortiGate configuration.
2 Add firewall addresses for the VLAN subinterface.
See "Adding addresses" on page
You can add zones to the FortiGate configuration to group together related interfaces
and VLAN subinterfaces to simplify firewall policy creation. For more information
about zones, see
To add policies for zones, you must use the following steps to add the zones to the
firewall policy grid:
1 Add zones to the FortiGate configuration.
See "Adding zones" on page
2 Add interfaces and VLAN subinterfaces to the zone.
See "Adding an interface to a zone" on page
3 Add firewall addresses for the zone.
See "Adding addresses" on page
138.
197.
or "Virtual domains in Transparent mode" on
197.
"Configuring zones" on page
138.
197.
Default firewall configuration
139.
137.
139.
"VLANs in
187