132
01-28006-0068-20041105
Fortinet Inc.
Exclusive virtual domain properties
System virtual domain
Virtual domain properties
By default, each FortiGate unit runs a virtual domain named root. This virtual domain
includes all of the FortiGate physical interfaces, VLAN subinterfaces, zones, firewall
policies, routing settings, and VPN settings.
Once you add a virtual domain you can configure it by adding VLAN subinterfaces,
zones, firewall policies, routing settings, and VPN settings. You can also move
physical interfaces from the root virtual domain to other virtual domains and move
VLAN subinterfaces from one virtual domain to another.
This process works the same way in NAT/Route and in Transparent mode.
Exclusive virtual domain properties
The following configuration settings are exclusively part of a virtual domain and are
not shared between virtual domains.
• System settings
• Physical interfaces (see
“To add physical interfaces to a virtual domain” on
page 136
)
• VLAN subinterfaces (see
“To add VLAN subinterfaces to a virtual domain” on
page 137
)
• Zones (see
“To add zones to a virtual domain” on page 137
)
• Management IP (Transparent mode) (see
“To select a management virtual
domain and add a management IP” on page 136
)
• Routing configuration
• Router configuration in NAT/Route mode (see
“To configure routing for a virtual
domain in NAT/Route mode” on page 138
)
• Routing table configuration in Transparent mode (see
“To configure the routing
table for a virtual domain in Transparent mode” on page 138
)
• Firewall settings
• Policies (see
“To add firewall policies to a virtual domain” on page 138
)
• Addresses (see
“To add firewall addresses to a virtual domain” on page 139
)
• Service groups
• IP pools (are associated with an interface) (see
“To add IP pools to a virtual
domain” on page 139
)
• Virtual IPs (are associated with an interface) (see
“To add Virtual IPs to a virtual
domain” on page 139
)
• VPN (see
“To configure VPN for a virtual domain” on page 140
)
• IPSec
• PPTP
• L2TP
• Certificates
Summary of Contents for FortiGate FortiGate-100A
Page 24: ...24 01 28006 0068 20041105 Fortinet Inc FortiLog documentation Introduction...
Page 72: ...72 01 28006 0068 20041105 Fortinet Inc Transparent mode VLAN settings System network...
Page 80: ...80 01 28006 0068 20041105 Fortinet Inc DHCP IP MAC binding settings System DHCP...
Page 114: ...114 01 28006 0068 20041105 Fortinet Inc Access profile options System administration...
Page 232: ...232 01 28006 0068 20041105 Fortinet Inc CLI configuration Firewall...
Page 244: ...244 01 28006 0068 20041105 Fortinet Inc peergrp Users and authentication...
Page 320: ...320 01 28006 0068 20041105 Fortinet Inc service smtp Antivirus...
Page 366: ...366 01 28006 0068 20041105 Fortinet Inc syslogd setting Log Report...
Page 380: ...380 01 28006 0068 20041105 Fortinet Inc Glossary...
Page 388: ...388 01 28006 0068 20041105 Fortinet Inc Index...