Fortinet FortiGate Series Administration Manual page 183

System Network
FortiGate Version 4.0 MR1 Administration Guide
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
Type The type of the interfaces. When creating a new interface, this is VLAN by default.
Set Type to VLAN to create a VLAN interface
on page 185). Set Type to Loopback Interface to create a loopback interface
(see"Creating a loopback interface" on page
On some models you can also create VLAN, 802.3ad Aggregate
802.3ad aggregate interface" on page
redundant interface" on page
• On FortiGate models with a switch interface, software switch is a valid type.
You cannot change this type in the GUI.
You cannot change the type of an interface except when first adding it.
Interface Select the name of the physical interface on which to create the VLAN. Once
created, the VLAN subinterface is listed below its physical interface in the
Interface list.
You cannot change the interface of an existing VLAN subinterface.
This field is only displayed when Type is set to VLAN.
VLAN ID Enter the VLAN ID that matches the VLAN ID of the packets to be received by this
VLAN subinterface. You cannot change the VLAN ID of an existing VLAN
subinterface.
The VLAN ID can be any number between 1 and 4094 and must match the VLAN
ID added by the IEEE 802.1Q-compliant router or switch connected to the VLAN
subinterface. For more information, see
page 185
This field is only displayed when Type is set to VLAN.
Virtual Domain Select the virtual domain to which this VLAN subinterface belongs.
Admin accounts with super-admin profile can change the VDOM for a VLAN when
VDOM configuration is enabled. For more information, see
domains" on page
Physical This section has two different forms depending on the interface type:
Interface • Software switch interface - this section is a display-only field showing the
interfaces that belong to the software switch virtual interface
Members
• 802.3ad aggregate or Redundant interface - this section includes available
interface and selected interface lists to enable adding or removing interfaces
from the interface.
Available Select interfaces from this list to include in the grouped interface - either
redundant or aggregate interface. Select the right arrow to add an interface to the
Interfaces
grouped interface.
Selected These interfaces are included in the aggregate or redundant interface.
interfaces Select the left arrow to remove an interface from the grouped interface.
For redundant interfaces, the interfaces will be activated during failover from the
top of the list to the bottom
Addressing Select the type of addressing mode as Manual, DHCP, or PPPoE.
mode To configure a static IP address for the interface, select Manual.
By default, low-end models are configured to DHCP addressing mode with
Override Internal DNS and Retrieve default Gateway from DHCP server both
enabled. These settings allow for easy out-of-the-box configuration.
You can also configure the interface for dynamic IP address assignment. For
more information, see
"Configuring an interface for PPPoE" on page
IP/Netmask Enter the IP address/subnet mask in the IP/Netmask field. The IP address must
be on the same subnet as the network to which the interface connects.
Two interfaces cannot have IP addresses on the same subnet.
This field is only available when Manual addressing mode is selected.
Ping Server To enable dead gateway detection, enter the IP address of the next hop router on
the network connected to the interface and select Enable.
187) interfaces.
.
159.
"Configuring DHCP on an interface" on page 188
(see"Creating a VLAN subinterface"
185).
(see"Creating an
186), and Redundant (see"Creating a
"Creating a VLAN subinterface" on
"Using virtual
190.
Configuring interfaces
or
183