Fortinet Gate 60D, Administration Manual

Page: 622 / 706

Peer to peer WAN optimization WAN optimization and web caching
FortiGate Version 4.0 Administration Guide
622 01-400-89802-20090424
http://docs.fortinet.com/ • Feedback
7 Select OK to save the rule.
The rule is added to the bottom of the WAN optimization list.
8 If required, move the rule to a different position in the list.
See “Moving a rule to a different position in the rule list” on page 607 .
To configure the serve side FortiGate unit
1 Go to WAN Opt. & Cache > Peer and enter a Local Host ID for the server side
FortiGate unit.
2 Select Create New and add a Peer Host ID and the IP address for the peer side
FortiGate unit.
3 Select OK to save the peer.
About WAN optimization addresses
A WAN optimization source or destination address can contain one or more network
addresses. Network addresses can be represented by an IP address with a netmask or an
IP address range.
When representing hosts by an IP address with a netmask, the IP address can represent
one or more hosts. For example, a source or destination address can be:
• a single computer, such as
192.45.46.45
• a subnetwork, such as
192.168.1.0
for a class C subnet
•
0.0.0.0
, which matches any IP address
The netmask corresponds to the subnet class of the address being added, and can be
represented in either dotted decimal or CIDR format. The FortiGate unit automatically
converts CIDR formatted netmasks to dotted decimal format. Example formats:
• netmask for a single computer:
255.255.255.255
, or
/32
• netmask for a class A subnet:
255.0.0.0
, or
/8
• netmask for a class B subnet:
255.255.0.0
, or
/16
• netmask for a class C subnet:
255.255.255.0
, or
/24
• netmask including all IP addresses:
0.0.0.0
Valid IP address and netmask formats include:
• x.x.x.x/x.x.x.x, such as
192.168.1.0/255.255.255.0
• x.x.x.x/x, such as
192.168.1.0/24
Protocol MAPI
Peer Peer_Fgt_2
Transparent Mode Enable
Enable Byte Caching Enable
Local Host ID Peer_Fgt_2
Peer Host ID Peer_Fgt_1
IP Address 172.20.34.12
Note: An IP address
0.0.0.0
with netmask
255.255.255.255
is not a valid source or
destination address.