Fortinet FortiGate-50A Quick Start Manual

FortiGate-50A LED Indicators
Power Green The FortiGate unit is powered on.
Off The FortiGate unit is powered off.
Status Green The FortiGate unit is starting.
Off The FortiGate unit is operating normally.
Link Green The correct cable is in use and the connected
Internal equipment has power.
External
Flashing Network activity at this interface.
Green
Off No link established.
100 Green The interface is connected at 100 Mbps.
Internal
External
For technical support please visit http://www.fortinet.com
1
Checking the package contents
Connector Type Speed
Internal RJ-45 10/100Base-T
External RJ-45 10/100Base-T
CONSOLE DB-9 9,600 bps
USB USB N/A
2
Planning the configuration
NAT/Route mode
In NAT/Route mode, the FortiGate-50A is visible to the network. The internal and
external interfaces are on different subnets.
You would typically use NAT/Route mode when the FortiGate-50A is deployed as a
gateway between private and public networks. In its default NAT/Route mode
configuration, the unit functions as a firewall. Users on the internal network can access
the Internet while the FortiGate-50A blocks all other traffic. Refer to the Documentation
CD-ROM for information on how to allow other traffic, and how to configure antivirus
protection, content filtering, network intrusion detection (NIDS), and virtual private
networks (VPNs).
FortiGate-50A Unit
in NAT/Route mode
External
204.23.1.5
Internet
NAT mode policies controlling
traffic between internal and
Security policies control whether communications through the FortiGate-50A operate in
NAT mode or in route mode. In NAT mode, the FortiGate-50A performs network
address translation before IP packets are sent to the destination network. In route
mode, no translation takes place. By default, the unit has a single NAT mode policy that
allows users on the internal network to securely access and download content from the
Internet. No other traffic is possible until you have configured more policies.
3
Using the default configuration
Factory default configuration
Operating Mode NAT/Route mode.
One NAT mode policy that allows users on the internal network to access any
Firewall Policy Internet service. No other traffic is allowed. All web and email traffic is scanned for
viruses.
External The External interface receives its IP address by DHCP from your Internet Service
interface Provider (ISP).
The FortiGate-50A functions as a DHCP server for your internal network. It
DHCP Server automatically sets the IP addresses of computers in this range:
on internal Starting IP: 192.168.1.1
network Ending IP: 192.168.1.254
One IP address is reserved for the FortiGate-50A internal interface: 192.168.1.99.
4
Connecting the FortiGate-50A
1. Place the unit on a stable surface. It requires 1.5 inches
(3.75 cm) clearance above and on each side to allow for cooling.
2. Connect the network cables.
3. Connect the power supply to the power connection at the back of the unit.
4. Connect the power cable to the power supply and to a power outlet.
The FortiGate-50A starts up. The Power and Status lights light. The Status
light flashes while the unit is starting up and turns off when the system is
up and running.
Protocol Description
Ethernet Connection to the internal network.
Ethernet Connection to the Internet.
RS-232 Optional connection to the management
serial computer.
Provides access to the command line interface.
USB Optional connection to a serial modem using a
USB to serial converter.
Internal
192.168.1.99
Internal network
POWER
PWR STATUS
INTERNAL EXTERNAL
A
LINK 100 LINK 100
external networks.
FortiGate-50A
© Copyright 2004 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks or registered trademarks of their respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
February 24, 2004
Check that the package contents are complete.
DC+12V
Power
RS-232 Serial
Connection
Before beginning to configure the FortiGate-50A, you need to plan how to integrate the unit into
your network. Your configuration plan is dependent upon the operating mode that you select:
NAT/Route mode (the default) or Transparent mode.
Transparent mode
In Transparent mode, the FortiGate-50A is invisible to the network. The internal and
external interfaces are on the same subnet. You only have to configure a management
IP address so that you can make configuration changes.
You would typically use the FortiGate-50A in Transparent mode on a private network
behind an existing firewall or behind a router. In its default Transparent mode
configuration, the unit functions as a firewall. It has a single security policy that allows
users on the internal network to securely download content from the external network.
No other traffic is possible until you have configured more security policies. Refer to the
Documentation CD-ROM for information on how to allow other traffic, and how to
configure antivirus protection, content filtering, and network intrusion detection (NIDS).
Gateway to
public network
204.23.1.5
Internet
192.168.1.3
(firewall, router)
You can connect two network segments to the FortiGate-50A to control traffic between
them.
• External can connect to the external firewall or router.
• Internal can connect to the internal network.
Depending on your requirements, you can deploy the FortiGate-50A without changing its factory
default configuration. All you need to do is configure your internal network and then connect the
FortiGate-50A. (If you need to change the factory default configuration, proceed to Step 4.)
To use the factory default configuration, follow these steps to install the
FortiGate-50A:
1. Configure the TCP/IP settings of the computers on your internal network to obtain
an IP address automatically using DHCP. Refer to your computer documentation
for assistance.
2. Complete Step 4 "Connecting the FortiGate-50A" of this QuickStart Guide.
Congratulations! You have finished the basic setup. Your network is now protected
You can easily change the default configuration. For example, if your ISP
uses PPPoE instead of DHCP, you only need to change one setting. Follow
the rest of this QuickStart Guide for instructions.
More complex implementations require more complex solutions. To learn
about the many advanced features you can configure, including how to
connect the FortiGate-50A to multiple networks, please refer to the online
Help and the Documentation CD-ROM.
Connect the FortiGate-50A unit to a power outlet and to the internal and external networks.
Default IP Addresses (Nat/Route mode)
DC+12V
INTERNAL 192.168.1.99
EXTERNAL DHCP
Optional connection to a serial modem
Straight-through Ethernet cable connects
to Internet (public switch, router or modem)
PWR STATUS
A
QuickStart Guide
Front
PWR STATUS
PWR STATUS
INTERNAL EXTERNAL
A
LINK 100 LINK 100
Power Status Internal External
LED LED Interface Interface
Back
Console
External Internal
USB
Internal
USB
External
FortiGate-50A Unit
in Transparent mode
10.10.10.2
PWR STATUS
INTERNAL EXTERNAL
A
LINK 100 LINK 100
External 10.10.10.1
Internal
Management IP
Transparent mode policies
controlling traffic between
internal and external networks
Power cable connects to power supply
Optional null modem cable connects to serial port on management computer
Console
External Internal
USB
Crossover Ethernet cable connects to
management computer on internal network
or
Straight-through Ethernet cable connects to
LAN or switch on internal network
INTERNAL EXTERNAL
LINK 100 LINK 100
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Null-Modem Cable
(RS-232)
Power Cable Power Supply
FortiGate-50A
USER MANUAL PWR STATUS External Internal
LINK 100 LINK 100
QuickStart Guide
Copyright 2004 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
Documentation
Internal network
10.10.10.3
Default IP Address (Transparent mode)
MANAGEMENT IP 10.10.10.1