Configuration Options - Fortinet FortiGate FortiGate-60M Installation Manual

Planning the FortiGate configuration

Configuration options

26
Figure 8: Example Transparent mode network configuration
Gateway to
public network
10.10.10.2
204.23.1.5
(firewall, router)
Internet
You can connect up to four network segments to the FortiGate unit to control traffic
between these network segments.
• A 4-port switch for connecting the FortiGate internal interface to your internal
network segment,
• WAN1 can connect to the external firewall or router,
• DMZ and WAN2 can connect to other network segments,
Note: The modem interface is not available in Transparent mode.
Once you have selected Transparent or NAT/Route mode operation, you can
complete the configuration plan and begin to configure the FortiGate unit. Choose
among three different tools to configure the FortiGate unit.
Web-based manager and setup wizard
The FortiGate web-based manager is a full featured management tool. You can use
the web-based manager to configure most FortiGate settings.
The web-based manager Setup Wizard guides you through the initial configuration
steps. Use the Setup Wizard to configure the administrator password, the interface
addresses, the default gateway address, and the DNS server addresses. Optionally,
use the Setup Wizard to configure the internal server settings for NAT/Route mode.
To connect to the web-based manager you require:
• Ethernet connection between the FortiGate unit and a management computer.
• Internet Explorer version 6.0 or higher on the management computer.
CLI
The FortiGate CLI is a full-featured management tool. Use it to configure the
administrator password, the interface addresses, the default gateway address, and
the DNS server addresses. To connect to the CLI you require:
• Serial connection between the FortiGate unit and a management computer.
• A terminal emulation application on the management computer.
01-28008-0111-20050128
FortiGate-60M Unit
in Transparent mode
INTERNAL
PWR STATUS 1 2 3 4
LINK 100 LINK 100 LINK 100 LINK 100
WAN1
M
Internal
Transparent mode policies
controlling traffic between
internal and external networks
10.10.10.1
Management IP
DMZ WAN1 WAN2
LINK 100 LINK 100 LINK 100
Internal network
10.10.10.3
Getting started
Fortinet Inc.