NAT/Route Mode
Internal Interface: IP: ____.____.____.____
Netmask: ____.____.____.____
WAN Interface: IP: ____.____.____.____
Netmask: ____.____.____.____
WLAN Interface IP: ____.____.____.____
Netmask: ____.____.____.____
TheinternalinterfaceIPaddressandnetmaskmustbevalidfortheinternalnetwork.
Transparent mode
Management IP: IP: ____.____.____.____
Netmask: ____.____.____.____
ThemanagementIPaddressandnetmaskmustbevalidforthenetworkfromwhichyouwill
manage the unit.
General settings
Administrator password:
Network Settings: Default Gateway: ____.____.____.____
Primary DNS Server: ____.____.____.____
Secondary DNS Server: ____.____.____.____
AdefaultgatewayisrequiredfortheunittorouteconnectionstotheInternet.
Factory default settings
NAT/Route mode Transparent mode
Internal interface 192.168.1.99 Management IP 0.0.0.0
WAN interface 192.168.100.99 Wireless settings
WLAN interface 10.10.80.1 SSID fortinet
Administrative account settings Geography World
User name admin Channel 5
Password (none)
Toresetthefactorydefaults,intheCLI,typethecommand
execute factory reset
Web-based Manager
1. Connect the internal interface to a management computer Ethernet interface. Use
straight-throughEthernetcablestoconnectthedevicesthroughahuborswitch.
2. Congurethemanagementcomputertobeonthesamesubnetastheinternalinter-
faceoftheunit.Todothis,changetheIPaddressofthemanagementcomputerto
192.168.1.2 and the netmask to 255.255.255.0.
3. Toaccesstheweb-basedmanager,startInternetExplorerandbrowseto
https://192.168.1.99(remembertoincludethe“s”inhttps://).
4. TypeadminintheNameeldandselectLogin.
NAT/Route mode
To change the administrator password
1. Go to System > Admin > Administrators.
2. Select Change Password for the admin administrator and enter a new password.
To congure interfaces
1. Go to System > Network > Interface.
2. Selecttheediticonforeachinterfacetocongure.
3. Set the addressing mode for the interface. (See the online help for information.)
• Formanualaddressing,entertheIPaddressandnetmaskfortheinterface.
• ForDHCPaddressing,selectDHCPandanyrequiredsettings.
• ForPPPoEaddressing,selectPPPoE,andentertheusernameandpasswordand
anyotherrequiredsettings.
To congure the Primary and Secondary DNS server IP addresses
1. Go to System > Network > Options,enterthePrimaryandSecondaryDNSIPad-
dressesthatyourecordedaboveandselectApply.
To congure a Default Gateway
1. Go to Router > Static and select Edit icon for the static route.
2. SetGatewaytotheDefaultGatewayIPaddressyourecordedaboveandselectOK.
Transparent mode
To switch from NAT/route mode to transparent mode
1. Go to System > Cong > Operation Mode and select Transparent.
2. Set the Management IP/Netmask to 192.168.1.99/24.
3. Set a default Gateway and select Apply.
To change the administrator password
1. Go to System > Admin > Administrators.
2. Select Change Password for the admin administrator and enter a new password.
To change the management interface
1. Go to System > Cong > Operation Mode.
2. EntertheManagementIPaddressandnetmaskthatyourecordedaboveandselect
Apply.
To congure the Primary and Secondary DNS server IP addresses
1. Go to System > Network > Options,enterthePrimaryandSecondaryDNSIP
addressesthatyourecordedaboveandselectApply.
Command Line Interface
1. UsetheRJ-45toDB9serialcabletoconnecttheunit’sConsoleporttothemanage-
ment computer serial port.
2. Start a terminal emulation program (HyperTerminal) on the management computer. Use
these settings:
• BaudRate(bps)9600,Databits8,ParityNone,Stopbits1,andFlowControlNone.
3. AttheLoginprompt,typeadminandpressEntertwice(nopasswordrequired).
NAT/Route mode
1. Conguretheinternalinterface.
cong system interface
edit internal
set ip <intf_ip>/<netmask_ip>
end
2. Repeattocongureeachinterface,forexample,toconguretheWANinterface.
cong system interface
edit wan
...
3. ConguretheprimaryandsecondaryDNSserverIPaddresses.
cong system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Congurethedefaultgateway.
cong router static
edit 1
set gateway <gateway_ip>
end
Transparent Mode
1. ChangefromNAT/RoutemodetoTransparentmodeandconguretheManagementIP
address.
cong system settings
set opmode transparent
set manageip <mng_ip>/<netmask>
set gateway <gateway_ip>
end
2. ConguretheDNSserverIPaddress.
cong system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
Collecting Information
Conguring
NAT/Route Mode
InNAT/Routemode,theunitisvisibletothenetworkthatitisconnectedto.Allofitsinter-
facesareondifferentsubnets.Eachinterfaceconnectedtoanetworkmustbecongured
with an IP address that is valid for that network.
YouwouldtypicallyuseNAT/Routemodewhentheunitisdeployedasagatewaybetween
privateandpublicnetworks.InitsdefaultNAT/Routemodeconguration,theunitfunctions
asarewall.Firewallpoliciescontrolcommunicationsthroughtheunit.
InNAT/Routemode,rewallpoliciescanoperateinNATmodeorinRoutemode.InNAT
mode,theunitperformsnetworkaddresstranslationbeforeIPpacketsaresenttothe
destinationnetwork.InRoutemode,notranslationtakesplace.
Transparent Mode
InTransparentmode,theunitisinvisibletothenetwork.Allofitsinterfacesareonthesame
subnet.YouonlyhavetocongureamanagementIPaddresssothatyoucanmakecongu-
ration changes.
YouwouldtypicallyusetheunitinTransparentmodeonaprivatenetworkbehindanexisting
rewallorbehindarouter.InitsdefaultTransparentmodeconguration,theunitfunctions
asarewall.Youcanconnectuptothreenetworksegmentstotheunittocontroltrafc
betweenthesenetworksegments.
RefertotheToolsandDocumentationCD-ROMforinformationonhowtocontroltrafc,andhowtocongurewirelessconnections,antivirusprotection,FortiGuard,Webcontentltering,Spamltering,intrusion
prevention(IPS),andvirtualprivatenetworking(VPN).
