General Settings - Fortinet FortiGate-200A Quick Start Manual

5
Collecting information
NAT/Route mode
IP:
Internal Interface:
Netmask:
IP:
WAN1:
Netmask:
IP:
WAN2:
Netmask:
IP:
DMZ1:
Netmask:
IP:
DMZ2:
Netmask:
6
Configuring the FortiGate-200A
Web-based manager
and Setup Wizard
NAT/Route mode
To configure the FortiGate-200A using the Setup Wizard, select the
Easy Setup Wizard button and follow the prompts.
To change the administrator password
1. Go to System > Admin > Administrators.
2. Select Change Password for the admin administrator and enter a new password.
To configure interfaces
1. Go to System > Network > Interface.
2. Select the edit icon for each interface to configure.
3. Set the addressing mode for the interface (see the online help for information).
• For manual addressing, enter the IP address and netmask for the interface.
• For DHCP addressing, select DHCP and any required settings.
• For PPPoE addressing, select PPPoE, and enter the username and password
and any other required settings.
To configure the Primary and Secondary DNS server IP addresses
1. Go to System > Network > DNS, enter the Primary and Secondary DNS IP
addresses that you recorded above and select Apply.
To configure a Default Gateway
1. Go to Router > Static and select Edit icon for the static route.
2. Set Gateway to the Default Gateway IP address that you recorded above and select
OK.
Note: If you change the internal interface IP address (NAT/Route mode) or management IP address (Transparent mode), you must use this address to reconnect to the web-based manager and Setup Wizard.
You might also have to change the IP address of the management computer to be on the same subnet as the new IP address.
Using the
Command Line Interface
NAT/Route mode
1. Configure the FortiGate-200A internal interface.
config system interface
edit internal
set mode static
set ip <intf_ip> <netmask_ip>
end
2. Repeat to configure each interface, for example, to configure the WAN1 interface.
config system interface
edit wan1
...
3. Configure the primary and secondary DNS server IP addresses.
config system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Configure the default gateway.
config router static
edit 1
set gateway <gateway_ip>
end
Using the
Control Buttons and LCD
NAT/Route mode
Use the control buttons and LCD to:
• configure the Internal, External, and DMZ interface IP addresses and netmasks.
• configure the External interface Default Gateway.
Note: When you enter an IP address, the LCD display always shows three digits for each part of the IP address. For example, the IP address 192.168.100.1 appears on the LCD display as 192.168.100.001.
7
Completing the configuration
Restarting the FortiGate-200A
Should you mistakenly change a network setting and cannot connect to the
unit, reboot the unit and try again or to set the unit back to factory defaults and
start over again.
Use these tables to record your FortiGate-200A configuration.
____.____.____.____
____.____.____.____
____.____.____.____
____.____.____.____
____.____.____.____
____.____.____.____
____.____.____.____
____.____.____.____
____.____.____.____
____.____.____.____
1. Connect the FortiGate-200A internal interface to a management computer Ethernet interface.
2. Configure the management computer to be on the same subnet as the internal interface of the FortiGate-200A. To do this,
change the IP address of the management computer to 192.168.1.2 and the netmask to 255.255.255.0.
3. To access the FortiGate web-based manager, start Internet Explorer and browse to https://192.168.1.99 (remember to
include the "s" in https://).
4. Type admin in the Name field and select Login.
Select the
Easy Setup Wizard
1. Use the serial cable to connect the FortiGate Console port to the management computer serial port.
2. Start a terminal emulation program (HyperTerminal) on the management computer. Use these settings:
Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
3. At the Login: prompt, type admin and press Enter twice (no password required).
• Use the Enter key to access the Main Menu, to select menu items, to move right when entering IP addresses, and to
confirm changes.
• Use the arrow keys to move up and down in the Main Menu, and to change IP address numbers.
• Use the Esc key to return to the Main Menu, and to move left when entering IP addresses.
The internal interface IP address and netmask must be valid for the internal network.
Transparent mode
IP:
Management IP:
Netmask:
The management IP address and netmask must be valid for the network from which
you will manage the FortiGate-200A.

General settings

Administrator password:
Default Gateway:
Network Settings: Primary DNS Server:
Secondary DNS Server:
You can connect the management computer directly to the FortiGate-200A internal interface
4-port switch.
Transparent mode
To switch from NAT/Route mode to transparent mode
1. Go to System > Status, select Change beside Operation Mode, and select OK.
2. Change the IP address of the management computer to 10.10.10.2 and use
Internet Explorer to browse to https://10.10.10.1.
To configure the FortiGate-200A using the Setup Wizard, select the Easy Setup Wizard
button and follow the prompts.
To change the administrator password
1. Go to System > Admin > Administrators.
2. Select Change Password for the admin administrator and enter a new password.
To configure the management interface
1. Go to System > Network > Management.
2. Enter the Management IP address and netmask that you recorded above.
3. Select administrative access options if required and select OK.
To configure the Primary and Secondary DNS server IP addresses
1. Go to System > Network > DNS, enter the Primary and Secondary DNS IP
addresses that you recorded above and select Apply.
To configure a Default Gateway
1. Go to System > Network > Management.
2. Set Default Gateway to the Default Gateway IP address that you recorded above
and select OK.
Transparent mode
1. Change from NAT/Route mode to Transparent mode.
config system global
set opmode transparent
end
2. Wait a moment and then log in again at the prompt.
3. Configure the Management IP address.
config system manageip
set ip <mng_ip> <netmask>
end
Configure the DNS server IP address.
config system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Configure the default route.
config router static
edit 1
set gateway <gateway_ip>
end
Transparent mode
Use the control buttons and LCD to:
• change the operating mode from NAT/Route to Transparent.
• configure the Management Interface IP address and netmask.
• configure the Default Gateway.
Congratulations!
You have finished configuring the basic settings. Your network is now protected from
Internet-based threats. To explore the full range of configuration options, see the online help
or the Documentation CD-ROM.
• To restart the unit, go to System > Maintenance >
ShutDown and select Reboot.
• To reset the unit, go to System > Maintenance >
Shutdown and select Reset to factory default.
____.____.____.____
____.____.____.____
____.____.____.____
____.____.____.____
____.____.____.____
CLI: execute reboot
CLI: execute factoryreset