Fortinet 3016B Network Card User Manual
Contents
1. interface CLI x x x x se Rack Mount Brackets 7 Vw aan PCCR Re Cee Cee Optional connection to a USB key for ABARRA coo J SESE pu s pi firmware backup and installation UNUNES CE ANUNEDON SESE REREEREE NREEZATU RRR SEEGE2 NANTE NENTE Connecting Connect the FortiGate unit to a power outlet and to the internal and external networks Alaaa aa aa e S000 oo oo ope Place the unit on a stable surface e Connect both power cables into the back of the FortiGate unit then plug the power o cables into a power bar Optional RJ 45 to DB 9 cable connects to serial port on management computer Fiber optic cable connects Straight through Ethernet for access f to internal network or Internet to the web based manager e MAIN MENU appears when the unit is up and running e If only one power supply is connected an audible alarm sounds to indicate a failed power supply To stop this alarm press the red alarm cancel button Power alarm reset bu s g a 3 Power cables connect i er l AnEeA Y to power outlets TTT TTTtItyy EBAHEA Al d O TOCCO PoR O P 3c o rTiTiitt ie SEEEEDO8 HEUEEDAN A NERE A NERTEE N A A Efo S805 PLLC 1 EREA J NEES c NENEZI S8R082 Se80na Planning the Configuration Before beginning to configure the FortiGate unit you need to plan how to integrate the unit into your netwo2. policies wall policies In NAT Route mode firewall policies can operate in NAT mode or in Route mode In NAT You can connect up to four network segments to the FortiGate unit to control traffic between mode the FortiGate unit performs network address translation before IP packets are sent to these network segments the destination network In Route mode no translation takes place Internal Network DMZ network 192 168 1 3 a WG TW Web Sarre Mail Server Routing policies controlling traffic between internal networks ates ORTIGATE Port 2 192 168 1 99 Port 1 Port 3 hols 10 10 10 1 REDON Internal network Router ORTIGATE NAT mode policies controlling traffic between internal and external networks f i Choosing a Configuration Tool Web based manager Command Line Interface CLI The FortiGate web based manager is an easy to use management tool The CLI is a full featured management tool Use it to configure the administrator password Use it to configure the administrator password the interface and default gateway addresses the interface addresses default gateway address and DNS server addresses To configure and the DNS server addresses advanced settings see the CL Reference on the Tools and Documentation CD Requirements Requirements e An Ethernet connection between the FortiGate unit and management computer e The RJ 45 to DB 9 serial connection between
3. the FortiGate unit and management e Internet Explorer 6 0 or higher on the management computer computer e Aterminal emulation application HyperTerminal for Windows on the management computer Collecting Information NAT Route Mode Transparent mode menti IP os RO _ Management IP a M a lt lt emase o oo names __ General settings H n aranana emase ooo e Wema ooo m e Pon 13 w S A default gateway is required for the FortiGate unit to route connections to the Internet Netmask Netmask Factory default settings Ports iP __ Port iP pes o l NAT Route mode Transparent mode MGMT 1 192 168 1 99 Management IP 0 0 0 0 Porte iP n Portis i salt Netmask Netmask P ee A N nem e Administrator password Network Settings Default Gateway E a a DHCP server on Internal 192 168 1 110 192 168 1 210 interface Configuring the FortiGate Unit Web based Manager 1 Connect the FortiGate internal interface to a management computer Ethernet interface Use a cross over Ethernet cable to connect the devices directly Use straight through Ethernet cables to connect the devices through a hub or switch 2 Configure the management computer to be on the same subnet as the internal interface of the FortiGate unit To do this change the IP address of the management computer to 192 168 1 2 and the netmask to 255 255 255 0 3 To acces
4. LED State Description __ Power P o e Status Green The correct cable is in use and the connected equipment MGMT1 and has power QuickStart Guide se Green Network activity at this interface No link established a Aloo nonmpnmnam MGMT1 and Connection at 1000 Mb wi wlio lol loi lo loi fol jo lo gro Left LED FortiGate 3016B Ports 1 to 16 Flashing Green Network activity at this interface s z f 4 l F z wy Copyright 2008 Fortinet Incorporated All rights reserved Products mentioned in this document are trademarks or registered trade marks of their respective holders Regulatory Compliance FCC Class A Part 15 CSA CUS 01 30006 0402 20080328 28 March 2008 Checking the Package Contents Front ee ce ZA Ethernet Cables Orange Crossover 4 Grey Straight through MGMT2 Base T copper networks or Bi SIGE SIGE p DB 9 Serial Cable Power Cables 2 Ports 1 to 16 LC SFP 1000Base SX Ethernet Multimode fiber optic connections to TEREE gigabit optical networks for small packet USE Q O performance required for voice video and SERME ee Modem oneal ana ELO other multimedia streaming applications Management _ CONSOLE RJ 45 9600 bps RS 232 Optional connection to the management B Ee 2 Optical transac vel ack 4x Copper Transceivers 8 N 1 serial computer Provides access to the com oe mand line
5. addresses config system dns set primary lt dns server 1p gt set secondary lt dns s erver ip gt end 3 Configure the default gateway config router static edit 1 set gateway lt gateway ip gt end Transparent Mode 1 Change from NAT Route mode to Transparent mode and configure the Management IP address config system settings set opmode transparent set manageip lt mng_ip gt lt netmask gt set gateway lt gateway ip gt end 2 Configure the DNS server IP address config system dns set primary lt dns server ip gt set Secondary lt dns server 1p gt end Visit these links for more information and documentation for your Fortinet product e Technical Documentation http docs forticare com e Fortinet Knowledge Center http kc forticare com e Fortinet Technical Support http support fortinet com
6. istrator password 1 Goto System gt Admin gt Administrators 2 Select Change Password for the admin administrator and enter a new password To change the management interface 1 Goto System gt Config gt Operation Mode 2 Enter the Management IP address and netmask that you recorded above and select Apply To configure the Primary and Secondary DNS server IP addresses 1 Goto System gt Network gt Options enter the Primary and Secondary DNS IP ad dresses that you recorded above and select Apply Completing the Configuration Congratulations You have finished configuring the basic settings Your network is now protected from Internet based threats To explore the full range of configuration options see the online help or the Tools and Documentation CD Command Line Interface 1 Use the RJ 45 to DB9 serial cable to connect the FortiGate Console port to the man agement computer serial port 2 Start a terminal emulation program HyperTerminal on the management computer Use these settings 3 Baud Rate bps 9600 Data bits 8 Parity None Stop bits 1 and Flow Control None 4 Atthe Login prompt type admin and press Enter twice no password required NAT Route mode 1 Configure the FortiGate internal interface config system interface edit lt port num gt set ip lt intf ip gt lt netmask ip gt set allowaccess http https ssh ping snmp telnet end 2 Configure the primary and secondary DNS server IP
7. rk Your configuration plan is dependent upon the operating mode that you select NAT Route mode the default or Transparent mode Refer to the Documentation CD ROM for information on how to control traffic and how to configure HA antivirus protection FortiGuard Web content filtering Spam filtering intrusion prevention IPS and virtual private networking VPN NAT Route mode Transparent mode In NAT Route mode each FortiGate unit is visible to the network that it is connected to All In Transparent mode the FortiGate unit is invisible to the network All of its interfaces are on of its interfaces are on different subnets Each interface connected to a network must be the same subnet You only have to configure a management IP address so that you can make configured with an IP address that is valid for that network configuration changes You would typically use NAT Route mode when the FortiGate unit is deployed as a gateway You would typically use the FortiGate unit in Transparent mode on a private network behind between private and public networks In its default NAT Route mode configuration the unit an existing firewall or behind a router In its default Transparent mode configuration the unit functions as a firewall Firewall policies control communications through the FortiGate unit functions as a firewall No traffic can pass through the FortiGate unit until you add fire No traffic can pass through the FortiGate unit until you add firewall
8. s the FortiGate web based manager start Internet Explorer and browse to https 192 168 1 99 remember to include the s in https 4 Type admin in the Name field and select Login NAT Route mode To change the administrator password 1 Goto System gt Admin gt Administrators 2 Select Change Password for the admin administrator and enter a new password To configure interfaces 1 Goto System gt Network gt Interface 2 Select the edit icon for each interface to configure 3 Set the addressing mode for the interface See the online help for information e For manual addressing enter the IP address and netmask for the interface e For DHCP addressing select DHCP and any required settings e For PPPoE addressing select PPPoE and enter the username and password and any other required settings To configure the Primary and Secondary DNS server IP addresses 1 Goto System gt Network gt Options enter the Primary and Secondary DNS IP ad dresses that you recorded above and select Apply To configure a Default Gateway 1 Go to Router gt Static and select Edit icon for the static route 2 Set Gateway to the Default Gateway IP address you recorded above and select OK Transparent mode To switch from NAT route mode to transparent mode 1 Goto System gt Config gt Operation Mode and select Transparent 2 Set the Management IP Netmask to 192 168 1 99 24 3 Seta default Gateway and select Apply To change the admin
Download Pdf Manuals
Related Search