Fortinet FortiWifi-30B User manual
© Copyright 2009 Fortinet Incorporated. All rights reserved.
Products mentioned in this document are trademarks or registered trademarks
of their respective holders.
Regulatory Compliance
FCC Class B Part 15 CSA/CUS
20 May 2009
Visit these links for more information and documentation for your Fortinet product.
• Technical Documentation - http://docs.forticare.com
• Fortinet Knowledge Center - http://kb.fortinet.com
• Fortinet Technical Support - http://support.fortinet.com
• Training Services - http://campus.training.fortinet.com
Connecting
Tools and Documenation
Straight-through
Ethernet cable
Power Cable Power Supply
RJ-45 to
DB-9 Serial Cable
Copyright 2008 Fortinet Incorporated. All rights reserved.
Trademarks
Products mentioned in this document are trademarks.
Forti Gate -30B
QuickStart Guide
STATUS WAN
INTERNAL
1 2 3POWER
USB
REGISTER
WAN
POWER STATUS
INTERNAL
321
LINK / ACTIVITY
10/100
WLAN
30B
4
Straight-through Ethernet cable connects
to Internet (public switch or router).
Attach the antenna to the
antenna mounts.
Straight-through Ethernet cables connect
to computers on internal network
Power cable
connects to power supply
Ground
RJ-45 to DB-9 serial cable
connects to management computer
123
USB
CONSOLE
WAN
C 12
4
123
USB
CONSOLE
4WAN
C 12
Power
Connection
RJ-45 Serial
Connection
USB
Ground
Antenna mount
WAN
Internal Interface,
switch connectors
1,2,3,4
Back
Power
LED
Status
LED
WAN
Interface
Internal
Interface
WLAN
LED
Front
Antenna mount
WAN
POWER STATUS
INTERNAL
321
LINK / ACTIVITY
10/100
WLAN
30B
4
Package Contents
Connect the FortiWiFi unit to a power outlet and to the internal and external networks.
• AfxtherubberfeettotheundersideoftheFortiWiFiunit,andattachtheantennasto
theantennamountsonthebackoftheFortiWiFiunit.
• Placetheunitonastablesurface.MakesuretheFortiWiFiunithasadequateairow
for cooling.
• PlacetheFortiWiFiunitinaprominentlocationwithinaroomformaximumcoverage,
rather than in a corner.
• Beawareoftheconstructionofyourenvironment,concreteandmetalwallscanhamper
signal strength.
• Keep the AP and wireless devices at least 10 feet away from appliances such as micro-
wave ovens and cordless phones.
FortiWi-30B
01-30007-97324-20090520
QuickStart Guide
LED State Description
Power
Green The unit is on.
Off The unit is off.
Status Green Onduringstartuporreboot.
Off Normal operation.
WLAN
Flashing
Green
FlashingwhenenablingWirelessLANport.
Green Wireless LAN port is up.
Off Wireless LAN port is down.
Link / Activity
Green Thecorrectcableisinuseandtheconnectedequip-
ment has power.
Flashing
Green
Network activity at this interface.
Off Nolinkestablished.
10/100 Green Theinterfaceisconnectedat100Mb.
Connector Type Speed Protocol Description
Internal RJ-45 10/100 Base-T Ethernet 4-port switch connection to up to four devices on the
internal network.
WLAN Antenna 802.11
b/g
Wireless connections to LAN.
WAN RJ-45 10/100 Base-T Ethernet Connection to the Internet.
CONSOLE RJ-45 9600bps
8/N/1
RS-232
serial
Optional connection to the management computer.
Provides access to the command line interface (CLI).
USB USB USB OptionalconnectionforUSBkeyforrmwarebackup
and installation.
Web-based manager
Theweb-basedmanagerisaneasytousemanagementtool.
Useittoconguretheadministratorpassword,theinterfaceanddefaultgatewayaddresses,
and the DNS server addresses.
Requirements:
• AnEthernetconnectionbetweentheunitandmanagementcomputer.
• AwebbrowsersuchasFireFoxorInternetExploreronthemanagementcomputer.
Command Line Interface (CLI)
TheCLIisafull-featuredmanagementtool.Useittoconguretheadministratorpassword,
theinterfaceaddresses,thedefaultgatewayaddress,andtheDNSserveraddresses.To
congureadvancedsettings,seetheToolsandDocumentationCD-ROM.
Requirements:
• TheRJ-45toDB9serialconnectionbetweentheunitandmanagementcomputer.
• A terminal emulation application (HyperTerminal for Windows) on the management
computer.
Conguration Tools
NAT/Route Mode
Internal Interface: IP: ____.____.____.____
Netmask: ____.____.____.____
WAN Interface: IP: ____.____.____.____
Netmask: ____.____.____.____
WLAN Interface IP: ____.____.____.____
Netmask: ____.____.____.____
TheinternalinterfaceIPaddressandnetmaskmustbevalidfortheinternalnetwork.
Transparent mode
Management IP: IP: ____.____.____.____
Netmask: ____.____.____.____
ThemanagementIPaddressandnetmaskmustbevalidforthenetworkfromwhichyouwill
manage the unit.
General settings
Administrator password:
Network Settings: Default Gateway: ____.____.____.____
Primary DNS Server: ____.____.____.____
Secondary DNS Server: ____.____.____.____
AdefaultgatewayisrequiredfortheunittorouteconnectionstotheInternet.
Factory default settings
NAT/Route mode Transparent mode
Internal interface 192.168.1.99 Management IP 0.0.0.0
WAN interface 192.168.100.99 Wireless settings
WLAN interface 10.10.80.1 SSID fortinet
Administrative account settings Geography World
User name admin Channel 5
Password (none)
Toresetthefactorydefaults,intheCLI,typethecommand
execute factory reset
Web-based Manager
1. Connect the internal interface to a management computer Ethernet interface. Use
straight-throughEthernetcablestoconnectthedevicesthroughahuborswitch.
2. Congurethemanagementcomputertobeonthesamesubnetastheinternalinter-
faceoftheunit.Todothis,changetheIPaddressofthemanagementcomputerto
192.168.1.2 and the netmask to 255.255.255.0.
3. Toaccesstheweb-basedmanager,startInternetExplorerandbrowseto
https://192.168.1.99(remembertoincludethe“s”inhttps://).
4. TypeadminintheNameeldandselectLogin.
NAT/Route mode
To change the administrator password
1. Go to System > Admin > Administrators.
2. Select Change Password for the admin administrator and enter a new password.
To congure interfaces
1. Go to System > Network > Interface.
2. Selecttheediticonforeachinterfacetocongure.
3. Set the addressing mode for the interface. (See the online help for information.)
• Formanualaddressing,entertheIPaddressandnetmaskfortheinterface.
• ForDHCPaddressing,selectDHCPandanyrequiredsettings.
• ForPPPoEaddressing,selectPPPoE,andentertheusernameandpasswordand
anyotherrequiredsettings.
To congure the Primary and Secondary DNS server IP addresses
1. Go to System > Network > Options,enterthePrimaryandSecondaryDNSIPad-
dressesthatyourecordedaboveandselectApply.
To congure a Default Gateway
1. Go to Router > Static and select Edit icon for the static route.
2. SetGatewaytotheDefaultGatewayIPaddressyourecordedaboveandselectOK.
Transparent mode
To switch from NAT/route mode to transparent mode
1. Go to System > Cong > Operation Mode and select Transparent.
2. Set the Management IP/Netmask to 192.168.1.99/24.
3. Set a default Gateway and select Apply.
To change the administrator password
1. Go to System > Admin > Administrators.
2. Select Change Password for the admin administrator and enter a new password.
To change the management interface
1. Go to System > Cong > Operation Mode.
2. EntertheManagementIPaddressandnetmaskthatyourecordedaboveandselect
Apply.
To congure the Primary and Secondary DNS server IP addresses
1. Go to System > Network > Options,enterthePrimaryandSecondaryDNSIP
addressesthatyourecordedaboveandselectApply.
Command Line Interface
1. UsetheRJ-45toDB9serialcabletoconnecttheunit’sConsoleporttothemanage-
ment computer serial port.
2. Start a terminal emulation program (HyperTerminal) on the management computer. Use
these settings:
• BaudRate(bps)9600,Databits8,ParityNone,Stopbits1,andFlowControlNone.
3. AttheLoginprompt,typeadminandpressEntertwice(nopasswordrequired).
NAT/Route mode
1. Conguretheinternalinterface.
cong system interface
edit internal
set ip <intf_ip>/<netmask_ip>
end
2. Repeattocongureeachinterface,forexample,toconguretheWANinterface.
cong system interface
edit wan
...
3. ConguretheprimaryandsecondaryDNSserverIPaddresses.
cong system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Congurethedefaultgateway.
cong router static
edit 1
set gateway <gateway_ip>
end
Transparent Mode
1. ChangefromNAT/RoutemodetoTransparentmodeandconguretheManagementIP
address.
cong system settings
set opmode transparent
set manageip <mng_ip>/<netmask>
set gateway <gateway_ip>
end
2. ConguretheDNSserverIPaddress.
cong system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
Collecting Information
Conguring
NAT/Route Mode
InNAT/Routemode,theunitisvisibletothenetworkthatitisconnectedto.Allofitsinter-
facesareondifferentsubnets.Eachinterfaceconnectedtoanetworkmustbecongured
with an IP address that is valid for that network.
YouwouldtypicallyuseNAT/Routemodewhentheunitisdeployedasagatewaybetween
privateandpublicnetworks.InitsdefaultNAT/Routemodeconguration,theunitfunctions
asarewall.Firewallpoliciescontrolcommunicationsthroughtheunit.
InNAT/Routemode,rewallpoliciescanoperateinNATmodeorinRoutemode.InNAT
mode,theunitperformsnetworkaddresstranslationbeforeIPpacketsaresenttothe
destinationnetwork.InRoutemode,notranslationtakesplace.
Transparent Mode
InTransparentmode,theunitisinvisibletothenetwork.Allofitsinterfacesareonthesame
subnet.YouonlyhavetocongureamanagementIPaddresssothatyoucanmakecongu-
ration changes.
YouwouldtypicallyusetheunitinTransparentmodeonaprivatenetworkbehindanexisting
rewallorbehindarouter.InitsdefaultTransparentmodeconguration,theunitfunctions
asarewall.Youcanconnectuptothreenetworksegmentstotheunittocontroltrafc
betweenthesenetworksegments.
RefertotheToolsandDocumentationCD-ROMforinformationonhowtocontroltrafc,andhowtocongurewirelessconnections,antivirusprotection,FortiGuard,Webcontentltering,Spamltering,intrusion
prevention(IPS),andvirtualprivatenetworking(VPN).
Other Fortinet Wireless Router manuals
