NAT/Route mode
Transparent mode
The management IP address and netmask must be valid for the network that the
FortiGate-5001 module is connected to.
General settings
A default gateway is required for the FortiGate unit to route connections to the Internet.
Port 1
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 2
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 3
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 4
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 5
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 6
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 7
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 8
IP:
____.____.____.____
Netmask:
____.____.____.____
Management IP:
IP:
____.____.____.____
Netmask:
____.____.____.____
Administrator password:
Network
Settings:
Default Gateway:
____.____.____.____
Primary DNS Server:
____.____.____.____
Secondary DNS Server:
____.____.____.____
3. To access the FortiGate web-based manager, start Internet Explorer and browse to https://192.168.1.99 (remember to
include the “s” in https://).
4. Type admin in the Name field and select Login.
Web-based manager
and Setup Wizard
Use these tables to record your FortiGate-5001 configuration. You can record NAT/Route or
Transparent mode settings and general settings that apply to both modes.
NAT/Route mode
Using the Setup Wizard
To configure the FortiGate-5001 module using the Setup Wizard,
select the Easy Setup Wizard button and follow the prompts.
Using the web-based manager
To change the administrator password
1. Go to
System > Admin > Administrators
.
2. Select Change Password for the admin administrator and enter a new password.
To configure interfaces
1. Go to
System > Network > Interface
.
2. Select the edit icon for each interface to configure.
3. Set the addressing mode for the interface. (see the online help for information.)
•For manual addressing, enter the IP address and netmask for the interface.
•For DHCP addressing, select DHCP and any required settings.
•For PPPoE addressing, select PPPoE, and enter the username and password and
any other required settings.
To configure the Primary and Secondary DNS server IP addresses
1. Go to
System > Network > DNS
, enter the Primary and Secondary DNS IP
addresses that you recorded above and select Apply.
To configure a Default Gateway
1. Go to
Router > Static
and select Edit icon for the static route.
2. Set Gateway to the Default Gateway IP address that you recorded above and select
OK.
Transparent mode
To switch from NAT/route mode to transparent mode
1. Go to
System > Status,
select Change beside Operation Mode, and select OK.
2. Change the IP address of the management computer to 10.10.10.2 and use
Internet Explorer to browse to https://10.10.10.1.
Using the Setup Wizard
To configure the FortiGate-5001 module using the Setup Wizard, select the Easy Setup
Wizard button and follow the prompts.
Using the web-based manager
To change the administrator password using the web-based manager
1. Go to
System > Admin > Administrators
.
2. Select Change Password for the admin administrator and enter a new password.
To configure the management interface using the web-based manager
1. Go to
System > Network > Management
.
2. Enter the Management IP address and netmask that you recorded above.
3. Select administrative access options if required and select OK.
To configure the Primary and Secondary DNS server IP addresses
1. Go to
System > Network > DNS
, enter the Primary and Secondary DNS IP
addresses that you recorded above and select Apply.
To configure a Default Gateway
1. Go to
System > Network > Management
.
2. Set Default Gateway to the Default Gateway IP address that you recorded above
and select OK.
Select the
Easy Setup Wizard
NAT/Route mode
1. Configure Port 1.
config system interface
edit port1
set mode static
set ip <intf_ip> <netmask_ip>
end
2. Repeat to configure each interface, for example, to configure Port 2:
config system interface
edit port2
set mode static
set ip <intf_ip> <netmask_ip>
end
3. Configure the primary and secondary DNS server IP addresses.
config system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Configure the default gateway.
config router static
edit 1
set gateway <gateway_ip>
end
Transparent mode
1. Change from NAT/Route mode to Transparent mode.
config system global
set opmode transparent
end
2. Wait a moment and then log in again at the prompt.
3. Configure the Management IP address.
config system manageip
set ip <mng_ip> <netmask>
end
Configure the DNS server IP address.
config system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Configure the default route.
config router static
edit 1
set gateway <gateway_ip>
end
Using the
Command Line Interface
1. Use the serial cable to connect the FortiGate Console port to the management computer serial port.
2. Start a terminal emulation program (HyperTerminal) on the management computer. Use these settings:
Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
3. At the Login: prompt, type
admin
and press Enter twice (no password required).
1. Connect Port 1 to the same network as a management computer.
2. Configure the management computer to be on the same subnet as Port 1. To do this, change
the IP address of the management computer to 192.168.1.2 and the netmask to 255.255.255.0.
Note:
If you change the IP address of Port 1 (NAT/Route mode) or management IP address (Transparent mode), you must use this address to reconnect to the web-based manager and Setup Wizard. You
might also have to change the IP address of the management computer to be on the same subnet as the new IP address.
Collecting information
5
Configuring the FortiGate-5001
6
Congratulations!
You have finished configuring the basic settings. Your network is now protected
from Internet-based threats. To explore the full range of configuration options, see
the online help or the Documentation CD-ROM.
Completing the configuration
7
•
To restart the unit, go to
System > Maintenance >
ShutDown
and
select Reboot.
•
To reset the unit, go to
System > Maintenance >
Shutdown
and select Reset to factory default.
CLI:
execute reboot
Restarting the FortiGate-5001
Should you mistakenly change a network setting and cannot connect to the unit, reboot
the unit and try again or to set the unit back to factory defaults and start over again.
CLI:
execute factoryreset
Technical support
Fortinet Technical Support Web site:
http://support.fortinet.com
Fortinet email support:
For customers in the United States, Canada, Mexico, Latin
America and South America.
For customers in Japan, Korea, China, Hong Kong,
Singapore, Malaysia, all other Asian countries, and Australia.
For customers in the United Kingdom, Scandinavia,
Mainland Europe, Africa, and the Middle East.