Connecting The Fortigate Unit To The Network(S); Configuring The Networks - Fortinet FortiGate FortiGate-3000 Install Manual

Configuring the FortiGate unit

Connecting the FortiGate unit to the network(s)

1
2
3

Configuring the networks

FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215
When you have completed the initial configuration, you can connect the FortiGate
unit between your internal network and the Internet.
The following network connections are available on the FortiGate unit:
• Internal for connecting your internal network
• External for connecting to the Internet
• Interface 3 is the interface to the DMZ network
To connect to the FortiGate unit
Connect to the Internal interface to the hub or switch connected to your internal
network.
Connect the External interface to the Internet.
Connect to the public switch or router provided by your ISP. If you are a DSL or
cable subscriber, connect the External interface to the internal or LAN connection
of your DSL or cable modem.
Optionally connect the Interface 3 interface to your DMZ network.
You can use a DMZ network to provide access from the Internet to a web server
or other server without installing the servers on your internal network.
Figure 9: FortiGate-3000 NAT/Route mode connections
Internet
(or public switch)
If you are running the FortiGate unit in NAT/Route mode, your networks must be
configured to route all Internet traffic to the IP address of the interface where the
networks are connected.
• For the internal network, change the default gateway address of all computers
and routers connected directly to your internal network to the IP address of the
FortiGate internal interface.
• For the external network, route all packets to the FortiGate external interface.
Hub or switch
External
Router
Port 3
Hub or switch
NAT/Route mode installation
Internal network
Internal
Web Server
Mail Server
43