Fortinet FortiGate FortiGate-3000 Installation Manual page 36

Connecting the FortiGate unit to the network(s)
36
There are three 10/100Base-TX connectors on the FortiGate-3000:
• interfaces 1 and 2 for connecting two networks to the FortiGate-3000.
• interface 3 for connecting a DMZ network or another network to the
FortiGate-3000.
There is also a copper gigabit ethernet connector (4/HA) used to connect to another
FortiGate-3000 for high availability (see
to connect to a fourth network.
Note: You can also create redundant connections to the Internet by connecting two interfaces
to separate Internet connections. For example, you could connect the external interface and
interface 1 to different Internet connections, each provided by a different service provider.
To connect the FortiGate-3000 unit running in NAT/Route mode
1 Connect the Internal interface to the hub or switch connected to the internal network.
2 Connect the External interface to your public switch or router.
3 Optionally, connect interfaces 1, 2, 3, and 4/HA to networks.
Figure 9: FortiGate-3000 NAT/Route mode connections
DMZ Network
Web Server
Mail Server
Port 3
Esc Enter
1 2 3
FortiGate-3000
01-28005-0026-20041101
NAT/Route mode installation
"High availability installation" on page
Internal Network
Hub or Switch
Internal
POWER 1 2 3
Hi-Temp 4/HA INT EXT
4/HA INTERNAL EXTERNAL
External
Public Switch
or Router
Internet
47) or
Fortinet Inc.