Collecting information
4
FortiBridge configuration settings
Administrator password
Management IP address/netmask
Default route
Primary DNS IP address
Secondary DNS IP address
Probes and Alerts
5
Technical support
6
Visit these links for more information and documentation for your Fortinet product.
Fortinet Technical Support Web site:
http://support.fortinet.com
Fortinet Knowledge Center:
http://kc.forticare.com
Technical Documentation:
http://docs.forticare.com
Probes
Configure probe settings to set actions on failure, add a dynamic IP
pattern used by the probe packets, and enter the serial number of the
FortiGate unit. Actions on failure can include failing open and sending
an alert email, a syslog message, and an SNMP trap.
config probe setting
set action_on_failure alertmail failopen snmp syslog
set dynamic_ip_pattern #.#.#.*
set fgt_serial <FortiGate_serial>
end
Enable ping, HTTP, FTP, POP3, SMTP, and IMAP probes. Optionally
change the failure threshold and probe interval for each probe.
Enable the ping probe to send ping packets through the FortiGate unit.
config probe probe_list ping
set status enable
end
Enable the HTTP probe and change the failure threshold and probe
interval.
config probe probe_list http
set status enable
set failure_threshold 5
set probe_interval 8
end
You can also change HTTP, FTP, POP3, SMTP, and IMAP probe port
numbers. See the
FortiBridge Administration Guide
for details.
Alerts
Configure alert email.
config alertemail setting
set server mail.myorg.com
set username [email protected]
set password PassWORD
set mailto1 [email protected]
end
Add the IP address of a syslog server that receives FortiBridge
syslog messages.
config log syslogd setting
set server 172.20.120.11
end
Add an SNMP community and add the IP address of a SNMP
manager to the community
config system snmp community
edit 1
set name snmp_community
config hosts
edit 1
set ip 192.168.20.102
end
end
Probes monitor the FortiGate unit by sending packets from the INT 2 interface
through the FortiGate unit to the EXT 2 interface. If probe packets are not
received at the EXT 2 interface the FortiBridge unit detects a failure.
Basic configuration
4
1. Change administrator password.
config system admin
edit admin
set password <password>
end
2. Change the Management IP address.
config system manageip
set ip <mng_ip>/<netmask>
end
3. Change DNS server IP addresses.
config system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Add the default route.
config system route
edit 1
set gateway <gateway_ip>
end
Connecting to the CLI
1. Connect the FortiBridge console port to the serial communications port
on your computer.
2. Start a terminal emulation program (HyperTerminal) on the
management computer. Use these settings: Baud Rate (bps) 9600,
Data bits 8, Parity None, Stop bits 1, and Flow Control None.
3. Press Escape to display the login prompt.
4. At the Login: prompt, type
admin
and press Enter twice (no password
required).
Collect information you need to set up the FortiBridge unit for your network.
Configure the FortiBridge unit from the command line interface (CLI).
Complete the basic FortiBridge unit network configuration.
Collecting information
3