Configuring; Nat Vs. Transparent Mode; Nat Mode - Fortinet FortiWiFi FortiWiFi-60B Install Manual

Configuring

Configuring

NAT vs. Transparent mode

NAT mode

FortiWiFi-60B FortiOS 3.0 MR6 Install Guide
01-30006-0447-20080131
This section provides an overview of the operating modes of the FortiWiFi unit,
NAT/Route and Transparent, and how to configure the FortiWiFi unit for each
mode. There are two ways you can configure the FortiWiFi unit, using the
web-based manager or the command line interface (CLI). This section will step
through using both methods. Use whichever you are most comfortable with.
This section includes the following topics:
• NAT vs. Transparent mode
• Connecting to the FortiWiFi unit
• Verify the configuration
• Backing up the configuration
• Additional configuration
The FortiWiFi unit can run in two different modes, depending on your network
infrastructure and requirements. You have a choice between NAT/Route mode
and Transparent mode. Both include the same robust network security features
such as antispam, antivirus, VPN and firewall policies.
In NAT/Route mode, the FortiWiFi unit is visible to the network. Like a router, all its
interfaces are on different subnets.
In NAT mode, each port is on a different subnet, enabling you to have a single IP
address available to the public Internet. The FortiWiFi unit performs network
address translation before it sends and receives the packet to the destination
network.
In Route mode, there is no address translation.
Figure 4: FortiWiFi unit in NAT mode
Internet
Router
You typically use NAT/Route mode when the FortiWiFi unit is operating as a
gateway between private and public networks. In this configuration, you would
create NAT mode firewall policies to control traffic flowing between the internal,
private network and the external, public network, usually the Internet.
204.23.1.5 192.168.1.99
NAT mode policies controlling
traffic between internal
and external networks.
NAT vs. Transparent mode
Internal network
192.168.1.20
19