Fortinet MR8 Manual de usuario

FortiGate 60Installation GuideINTERNALDMZ4321LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100WAN1 WAN2PWR STATUSVersion 2.80 MR828 Janua

10 01-28008-0018-20050128 Fortinet Inc.Customer service and technical support IntroductionFortiMail documentation• FortiMail Administration GuideDescr

Introduction Customer service and technical supportFortiGate-60 Installation Guide 01-28008-0018-20050128 11For information on Fortinet telephone su

12 01-28008-0018-20050128 Fortinet Inc.Customer service and technical support Introduction

FortiGate-60 Installation Guide Version 2.80 MR8FortiGate-60 Installation Guide 01-28008-0018-20050128 13Getting startedThis section describes unpacki

14 01-28008-0018-20050128 Fortinet Inc.Package contents Getting startedPackage contentsThe FortiGate-60 package contains the following items:• FortiGa

Getting started Turning the FortiGate unit power on and offFortiGate-60 Installation Guide 01-28008-0018-20050128 15Power requirements• DC input vol

16 01-28008-0018-20050128 Fortinet Inc.Connecting to the web-based manager Getting startedConnecting to the web-based managerUse the following procedu

Getting started Connecting to the command line interface (CLI)FortiGate-60 Installation Guide 01-28008-0018-20050128 17Connecting to the command lin

18 01-28008-0018-20050128 Fortinet Inc.Quick installation using factory defaults Getting startedQuick installation using factory defaultsYou can quick

Getting started Factory default FortiGate configuration settingsFortiGate-60 Installation Guide 01-28008-0018-20050128 197 Select one of the followi

© Copyright 2005 Fortinet Inc. All rights reserved.No part of this publication including text, examples, diagrams or illustrations may be reproduced,t

20 01-28008-0018-20050128 Fortinet Inc.Factory default FortiGate configuration settings Getting startedFactory default NAT/Route mode network configur

Getting started Factory default FortiGate configuration settingsFortiGate-60 Installation Guide 01-28008-0018-20050128 21Factory default Transparent

22 01-28008-0018-20050128 Fortinet Inc.Factory default FortiGate configuration settings Getting startedThe factory default firewall configuration is t

Getting started Planning the FortiGate configurationFortiGate-60 Installation Guide 01-28008-0018-20050128 23Figure 5: Web protection profile settin

24 01-28008-0018-20050128 Fortinet Inc.Planning the FortiGate configuration Getting startedYou must configure routing to support the redundant WAN1 an

Getting started Planning the FortiGate configurationFortiGate-60 Installation Guide 01-28008-0018-20050128 25Otherwise, security policy configuratio

26 01-28008-0018-20050128 Fortinet Inc.Next steps Getting startedConfiguration optionsOnce you have selected Transparent or NAT/Route mode operation,

FortiGate-60 Installation Guide Version 2.80 MR8FortiGate-60 Installation Guide 01-28008-0018-20050128 27NAT/Route mode installationThis chapter descr

28 01-28008-0018-20050128 Fortinet Inc.Using the web-based manager NAT/Route mode installationDHCP or PPPoE configurationYou can configure any FortiGa

NAT/Route mode installation Using the web-based managerFortiGate-60 Installation Guide 01-28008-0018-20050128 29Configuring basic settingsAfter conn

ContentsFortiGate-60 Installation Guide 01-28008-0018-20050128 3Table of ContentsIntroduction...

30 01-28008-0018-20050128 Fortinet Inc.Using the command line interface NAT/Route mode installation1 Go to System > Router > Static.2 If the Sta

NAT/Route mode installation Using the command line interfaceFortiGate-60 Installation Guide 01-28008-0018-20050128 31Exampleconfig system interfacee

32 01-28008-0018-20050128 Fortinet Inc.Using the setup wizard NAT/Route mode installationTo configure DNS server settings• Set the primary and seconda

NAT/Route mode installation Using the setup wizardFortiGate-60 Installation Guide 01-28008-0018-20050128 33If you are configuring the FortiGate unit

34 01-28008-0018-20050128 Fortinet Inc.Connecting the FortiGate unit to the network(s) NAT/Route mode installationStarting the setup wizard1 In the we

NAT/Route mode installation Connecting the FortiGate unit to the network(s)FortiGate-60 Installation Guide 01-28008-0018-20050128 35• One DMZ port f

36 01-28008-0018-20050128 Fortinet Inc.Configuring the networks NAT/Route mode installationConfiguring the networksIf you are running the FortiGate un

NAT/Route mode installation Next stepsFortiGate-60 Installation Guide 01-28008-0018-20050128 37To set the date and timeFor effective scheduling and

38 01-28008-0018-20050128 Fortinet Inc.Next steps NAT/Route mode installation1 Go to System > Maintenance > Update Center.2 Select Refresh to te

FortiGate-60 Installation Guide Version 2.80 MR8FortiGate-60 Installation Guide 01-28008-0018-20050128 39Transparent mode installationThis chapter des

Contents4 01-28008-0018-20050128 Fortinet Inc.Using the command line interface...

40 01-28008-0018-20050128 Fortinet Inc.Using the web-based manager Transparent mode installationUsing the web-based managerYou can use the web-based m

Transparent mode installation Using the command line interfaceFortiGate-60 Installation Guide 01-28008-0018-20050128 41To configure DNS server setti

42 01-28008-0018-20050128 Fortinet Inc.Using the command line interface Transparent mode installationThe CLI displays the status of the FortiGate unit

Transparent mode installation Using the setup wizardFortiGate-60 Installation Guide 01-28008-0018-20050128 43ExampleIf the default gateway IP is 204

44 01-28008-0018-20050128 Fortinet Inc.Connecting the FortiGate unit to your network Transparent mode installationConnecting the FortiGate unit to you

Transparent mode installation Next stepsFortiGate-60 Installation Guide 01-28008-0018-20050128 45Next stepsYou can use the following information to

46 01-28008-0018-20050128 Fortinet Inc.Next steps Transparent mode installation1 Go to System > Maintenance > Update Center.2 Select Refresh to

FortiGate-60 Installation Guide Version 2.80 MR8FortiGate-60 Installation Guide 01-28008-0018-20050128 47High availability installationThis chapter de

48 01-28008-0018-20050128 Fortinet Inc.Configuring FortiGate units for HA operation High availability installationTable 10: High availability settings

High availability installation Configuring FortiGate units for HA operationFortiGate-60 Installation Guide 01-28008-0018-20050128 49Configuring Fort

FortiGate-60 Installation Guide Version 2.80 MR8FortiGate-60 Installation Guide 01-28008-0018-20050128 5IntroductionFortiGate Antivirus Firewalls impr

50 01-28008-0018-20050128 Fortinet Inc.Configuring FortiGate units for HA operation High availability installationTo configure a FortiGate unit for HA

High availability installation Connecting the cluster to your networksFortiGate-60 Installation Guide 01-28008-0018-20050128 51To configure the Fort

52 01-28008-0018-20050128 Fortinet Inc.Connecting the cluster to your networks High availability installationInserting an HA cluster into your network

High availability installation Installing and configuring the clusterFortiGate-60 Installation Guide 01-28008-0018-20050128 532 Power on all the For

54 01-28008-0018-20050128 Fortinet Inc.Installing and configuring the cluster High availability installation

FortiGate-60 Installation Guide Version 2.80 MR8FortiGate-60 Installation Guide 01-28008-0018-20050128 55Configuring the modem interfaceThe FortiGate-

56 01-28008-0018-20050128 Fortinet Inc.Selecting a modem mode Configuring the modem interfaceFor the FortiGate unit to switch from an ethernet interfa

Configuring the modem interface Configuring modem settingsFortiGate-60 Installation Guide 01-28008-0018-20050128 573 Configure other modem settings

58 01-28008-0018-20050128 Fortinet Inc.Connecting and disconnecting the modem in Standalone mode Configuring the modem interfaceYou can configure and

Configuring the modem interface Defining a Ping ServerFortiGate-60 Installation Guide 01-28008-0018-20050128 595 Select Dial Now.The FortiGate unit

6 01-28008-0018-20050128 Fortinet Inc.Secure installation, configuration, and management IntroductionThe CLI or the web-based manager can then be used

60 01-28008-0018-20050128 Fortinet Inc.Adding firewall policies for modem connections Configuring the modem interface3 For Fail-over Detection, type a

FortiGate-60 Installation Guide 01-28008-0018-20050128 61FortiGate-60 Installation Guide Version 2.80 MR8IndexAauto-dial 57CCLI 6configuring IP addre

62 01-28008-0018-20050128 Fortinet Inc.IndexSset time 37, 45setup wizard 28, 32, 40, 43starting 29, 34, 40, 43standalone modeconfiguring 56modem 55, 5

Introduction Document conventionsFortiGate-60 Installation Guide 01-28008-0018-20050128 7Setup wizardThe FortiGate setup wizard provides an easy way

8 01-28008-0018-20050128 Fortinet Inc.FortiGate documentation IntroductionFor example:set allowaccess {ping https ssh snmp http telnet}You can enter a

Introduction Related documentationFortiGate-60 Installation Guide 01-28008-0018-20050128 9• FortiGate IPS GuideDescribes how to configure the FortiG