Network Router User Manual

ManualsBrandsFortinet ManualsNetwork Router100A

Products mentioned in this document are trademarks or registered trade-

marks of their respective holders.

Regulatory Compliance

FCC Class A Part 15 CSA/CUS

17 January 2007

INTERNAL

DMZ 1

4321

LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100

WAN 1 WAN 2

PWR STATUS

DMZ 2

Internal Interface

(4-port switch connectors)

WAN

1,2

DMZ

1,2

Internal Interface

(4-port switch)

Ethernet Cables:

Orange - Crossover

Grey - Straight-through

Power Cable Power Supply

Back

Front

1234

Console

USB

WAN 2 WAN 1

DMZ 2 DMZ 1

DC+12V

Internal

Power

Connection

RS-232 Serial

Connection

USB

DMZ2

DMZ1

WAN2

WAN1

Documentation

FortiG ate-100A

Trademarks

Products mentioned i n this docu ment are tra demarks.

Q u i c k S t a r t G u i d e

INTERNAL

EXTERNAL

DMZ

POWER

STATUS

Status

LED

Power

LED

RJ-45 to

DB-9 Serial Cable

Console

WAN 2

WAN 1

DMZ 2 DMZ 1Internal

Optional RS-232 serial cable connects to serial port on management computer

Straight-through Ethernet

cables connect to Internet

(public switch, router or modem)

Power cable connects to power supply

Straight-through

Ethernet cables connect

to computers on internal network

Optional connection to

1 or 2 DMZ networks

1234

USB

DC+12V

Checking the Package Contents

Connecting

Planning the Configuration

Connector Type Speed Protocol Description

Internal RJ-45 10/100 Base-T Ethernet A 4-port switch connection for up to four network

devices or the internal network.

WAN1 and

WAN2

RJ-45 10/100 Base-T Ethernet Connection to the Internet.

DMZ1 and

DMZ2

RJ-45 10/100 Base-T Ethernet Optional connection to one or two DMZ networks, or

other FortiGate-100A units for high availability (HA).

For details, see the Documentation CD-ROM.

Console RJ-45 9600 Bps RS-232 Optional connection to the management computer.

Provides access to the command line interface

(CLI).

USB USB USB Optional connection for the FortiUSB key, modem or

backup operation

Place the unit on a stable surface. It requires 1.5 inches (3.75 cm) clearance above and

on each side to allow for cooling.

Plug in power cable to the unit before connecting power.

The Status light ashes while the unit is starting up and turns off when the system is up

and running.

•

Connect the FortiGate unit to a power outlet and to the internal and external networks.

Before beginning to congure the FortiGate unit, you need to plan how to integrate the unit into your network. Your conguration plan depends on the operating mode you select: NAT/Route

mode (the default) or Transparent mode.

NAT/Route mode

In NAT/Route mode, each FortiGate unit is visible to the network that it is connected to. All

of its interfaces are on

different subnets. Each

interface that is connected

to a network must be

congured with an IP ad-

dress that is valid for that

network.

You would typically use

NAT/Route mode when

the FortiGate unit is

deployed as a gateway

between private and public

networks. In its default

NAT/Route mode congu-

ration, the unit functions as a rewall. Firewall policies control communications through the

FortiGate unit. No

trafc can pass through the FortiGate unit until you add rewall policies. In NAT/Route mode,

rewall policies can operate in NAT mode or in Route mode. In NAT mode, the FortiGate unit

performs network address translation before IP packets are sent to the destination network.

In Route mode, no translation takes place.

Transparent mode

In Transparent mode, the FortiGate unit is invisible to the network. All of its interfaces are on

the same subnet. You only have to congure a management IP address so that you can make

conguration changes.

You would typically use the

FortiGate unit in Transparent

mode on a private network

behind an existing rewall or

behind a router. In its default

Transparent mode conguration,

the unit functions as a rewall.

No trafc can pass through the

FortiGate unit until you add

rewall policies.

You can connect up to four network segments to the FortiGate unit to control trafc between

these network segments.

Router

Internet

Internal

network

10.10.10.3

Internal

WAN1

Gateway to public network

204.23.1.5 10.10.10.2

Transparent mode policies

controlling traffic between

internal and external networks

Refer to the Documentation CD-ROM for information on how to control trafc, and how to congure HA, antivirus protection, FortiGuard, Web content ltering, Spam ltering,

intrusion prevention (IPS), and virtual private networking (VPN).

FortiGate-100A

01-30004-0066-20070117

LED State Description

Power

Green The FortiGate unit is on.

Off The FortiGate unit is off.

Status

Flashing Green The FortiGate unit is starting up.

Green The FortiGate unit is running normally.

Off The FortiGate unit is powered off.

Link

Internal, 1, 2, 3, 4,

WAN1 and WAN2,

DMZ1 and DMZ2

Green The correct cable is in use and the connected

equipment has power.

Flashing Green Network activity at this interface.

Off No link established.

100

Internal, 1, 2, 3, 4,

WAN1 and WAN2,

DMZ1 and DMZ2

Green The interface is connected at 100Mbps.

Router

Internet

Internal

network

DMZ

network

192.168.1.3

Internal network

192.168.1.99

DMZ network

10.10.10.1

10.10.10.2

NAT mode policies

controlling traffic between

internal and external networks

Route mode policies

controlling traffic between

internal networks

WAN1

204.23.1.5

DMZ

Internal

Choosing a Configuration Tool

Web-based manager

The FortiGate web-based manager is an easy to use management tool. Use it to congure

the administrator password, the interface and default gateway addresses, and the DNS

server addresses.

Requirements:

An Ethernet connection between the FortiGate unit and management computer.

Internet Explorer 6.0 or higher on the management computer.

•

Command Line Interface (CLI)

The CLI is a full-featured management tool. Use it to congure the administrator password,

the interface addresses, the default gateway address, and the DNS server addresses. To

congure advanced settings, see the Documentation CD-ROM.

Requirements:

The DB-9 serial connection between the FortiGate unit and management computer.

A terminal emulation application (HyperTerminal for Windows) on the management

computer.

•

INTERNAL

DMZ 1

4321

LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100

WAN 1 WAN 2

PWR STATUS

DMZ 2

Summary of content (2 pages)

PAGE 1
LED Power Status Link Internal, 1, 2, 3, 4, WAN1 and WAN2, DMZ1 and DMZ2 100 Internal, 1, 2, 3, 4, WAN1 and WAN2, DMZ1 and DMZ2 State Description Green The FortiGate unit is on. Off The FortiGate unit is off. Flashing Green The FortiGate unit is starting up. Green The FortiGate unit is running normally. Off The FortiGate unit is powered off. Green The correct cable is in use and the connected equipment has power. Flashing Green Network activity at this interface. Off No link established.
PAGE 2
Collecting Information General settings NAT/Route Mode Internal Interface WAN1 WAN2 DMZ1 DMZ2 IP: ____.____.____.____ Netmask: ____.____.____.____ IP: ____.____.____.____ Netmask: ____.____.____.____ IP: ____.____.____.____ Netmask: ____.____.____.____ IP: ____.____.____.____ Netmask: ____.____.____.____ IP: ____.____.____.____ Netmask: ____.____.____.____ The internal interface IP address and netmask must be valid for the internal network. Transparent mode Management IP IP: ____.