Configuring
Configuring Transparent mode
FortiGate-1000A/AFA2 FortiOS 3.0 MR6 Install Guide
01-30006-0461-20080131
25
For an initial configuration, you must edit the factory configured static default route
to specify a different default gateway for the FortiGate unit. This will enable the
flow of data through the FortiGate unit.
For details on adding additional static routes, see the
FortiGate Administration
Guide
.
To modify the default gateway
config router static
edit <seq_num>
set gateway <gateway_IP>
set device <interface>
end
Adding firewall policies
Firewall policies enable traffic to flow through the FortiGate interfaces. Firewall
policies to define the FortiGate unit process the packets in a communication
session. You can configure the firewall policies to allow only specific traffic, users
and specific times when traffic is allowed.
For the initial installation, a single firewall policy that enables all traffic through will
enable you to verify your configuration is working. On lower-end units such a
default firewall policy is already in place. For the higher end FortiGate units, you
will need to add a firewall policy.
The following steps add two policies that allows all traffic through the FortiGate
unit, to enable you to continue testing the configuration on the network.
To add an outgoing traffic firewall policy
config firewall profile
edit <seq_num>
set srcintf <source_interface>
set srcaddr <source_IP>
set dstintf <destination_interface>
set dstaddr <destination_IP>
set schedule always
set service ANY
set action accept
end
To create an incoming traffic firewall policy, use the same commands with the
addresses reversed.
Note that these policies allow all traffic through. No protection profiles have been
applied. Ensure you create additional firewall policies to accommodate your
network requirements.
Configuring Transparent mode
Configuring Transparent mode involves switching to Transparent mode,
configuring the management IP address, default routes, and simple firewall
policies. You can use the web-based manager or the CLI to configure the
FortiGate unit in Transparent mode.
Summary of Contents for FortiGate FortiGate-1000A
Page 1: ...www fortinet com FortiGate 1000A AFA2 FortiOS 3 0 MR6 I N S T A L L G U I D E...
Page 6: ...FortiGate 1000A AFA2 FortiOS 3 0 MR6 Install Guide 4 01 30006 0461 20080131 Contents...
Page 55: ...FortiGate 1000A AFA2 FortiOS 3 0 MR6 Install Guide 3 01 30006 0461 20080131 Index...
Page 56: ...FortiGate 1000A AFA2 FortiOS 3 0 MR6 Install Guide 4 01 30006 0461 20080131 Index...
Page 57: ...www fortinet com...
Page 58: ...www fortinet com...
