2. Configure the management computer to be on the same subnet as the internal interface of the FortiGate-100. To do this,
change the IP address of the management computer to 192.168.1.2 and the netmask to 255.255.255.0.
3. To access the FortiGate web-based manager, start Internet Explorer and browse to https://192.168.1.99 (remember to
include the “s” in https://).
4. Type admin in the Name field and select Login.
Web-based manager
and Setup Wizard
NAT/Route mode
To configure the FortiGate-100 using the Setup Wizard, select the
Easy Setup Wizard button and follow the prompts.
To change the administrator password
1. Go to
System > Admin > Administrators
.
2. Select Change Password for the admin administrator and enter a new password.
To configure interfaces
1. Go to
System > Network > Interface
.
2. Select the edit icon for each interface to configure.
3. Set the addressing mode for the interface. (see the online help for information.)
•
For manual addressing, enter the IP address and netmask for the interface.
•
For DHCP addressing, select DHCP and any required settings.
•
For PPPoE addressing, select PPPoE, and enter the username and password
and any other required settings.
To configure the Primary and Secondary DNS server IP addresses
1. Go to
System > Network > DNS
, enter the Primary and Secondary DNS IP
addresses that you recorded above and select Apply.
To configure a Default Gateway
1. Go to
Router > Static
and select Edit icon for the static route.
2. Set Gateway to the Default Gateway IP address that you recorded above and select
OK.
Transparent mode
To switch from NAT/route mode to transparent mode
1. Go to
System > Status,
select Change beside Operation Mode, and select OK.
2. Change the IP address of the management computer to 10.10.10.2 and use
Internet Explorer to browse to https://10.10.10.1.
To configure the FortiGate-100 using the Setup Wizard, select the Easy Setup Wizard
button and follow the prompts.
To change the administrator password
1. Go to
System > Admin > Administrators
.
2. Select Change Password for the admin administrator and enter a new password.
To configure the management interface
1. Go to
System > Network > Management
.
2. Enter the Management IP address and netmask that you recorded above.
3. Select administrative access options if required and select OK.
To configure the Primary and Secondary DNS server IP addresses
1. Go to
System > Network > DNS
, enter the Primary and Secondary DNS IP
addresses that you recorded above and select Apply.
To configure a Default Gateway
1. Go to
System > Network > Management
.
2. Set Default Gateway to the Default Gateway IP address that you recorded above
and select OK.
Select the
Easy Setup Wizard
NAT/Route mode
1. Configure the FortiGate-100 internal interface.
config system interface
edit internal
set mode static
set ip <intf_ip> <netmask_ip>
end
2. Repeat to configure each interface, for example, to configure the external interface.
config system interface
edit external
...
3. Configure the primary and secondary DNS server IP addresses.
config system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Configure the default gateway.
config router static
edit 1
set gateway <gateway_ip>
end
Transparent mode
1. Change from NAT/Route mode to Transparent mode.
config system global
set opmode transparent
end
2. Wait a moment and then log in again at the prompt.
3. Configure the Management IP address.
config system manageip
set ip <mng_ip> <netmask>
end
Configure the DNS server IP address.
config system dns
set primary <dns-server_ip>
set secondary <dns-server_ip>
end
4. Configure the default route.
config router static
edit 1
set gateway <gateway_ip>
end
Using the
Command Line Interface
1. Use the serial cable to connect the FortiGate Console port to the management computer serial port.
2. Start a terminal emulation program (HyperTerminal) on the management computer. Use these settings:
Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
3. At the Login: prompt, type
admin
and press Enter twice (no password required).
1. Connect the FortiGate-100 internal interface to a management computer Ethernet interface.
Use a cross-over Ethernet cable to connect the devices directly. Use straight-through Ethernet
cables to connect the devices through a hub or switch.
Note:
If you change the internal interface IP address (NAT/Route mode) or management IP address (Transparent mode), you must use this address to reconnect to the web-based manager and Setup Wizard.
You might also have to change the IP address of the management computer to be on the same subnet as the new IP address.
Configuring the FortiGate-100
6
NAT/Route mode
The internal interface IP address and netmask must be valid for the internal network.
Transparent mode
The management IP address and netmask must be valid for the network from which
you will manage the FortiGate-100.
General settings
A default gateway is required for the FortiGate unit to route connections to the Internet.
Internal Interface:
IP:
____.____.____.____
Netmask:
____.____.____.____
External Interface:
IP:
____.____.____.____
Netmask:
____.____.____.____
DMZ Interface
IP:
____.____.____.____
Netmask:
____.____.____.____
Management IP:
IP:
____.____.____.____
Netmask:
____.____.____.____
Administrator password:
Network Settings:
Default Gateway:
____.____.____.____
Primary DNS Server:
____.____.____.____
Secondary DNS Server:
____.____.____.____
Use these tables to record your FortiGate-100 configuration.
Collecting information
5
Congratulations!
You have finished configuring the basic settings. Your network is now protected
from Internet-based threats. To explore the full range of configuration options, see
the online help or the Documentation CD-ROM.
Completing the configuration
7
•
To restart the unit, go to
System > Maintenance >
ShutDown
and
select Reboot.
•
To reset the unit, go to
System > Maintenance >
Shutdown
and select Reset to factory default.
CLI:
execute reboot
Restarting the FortiGate-100
Should you mistakenly change a network setting and cannot connect to the unit, reboot
the unit and try again or to set the unit back to factory defaults and start over again.
CLI:
execute factoryreset
Technical support
Fortinet Technical Support Web site:
http://support.fortinet.com
Fortinet email support:
For customers in the United States, Canada, Mexico, Latin
America and South America.
For customers in Japan, Korea, China, Hong Kong,
Singapore, Malaysia, all other Asian countries, and Australia.
For customers in the United Kingdom, Scandinavia,
Mainland Europe, Africa, and the Middle East.
•
To restart the unit, go to
System > Maintenance >
ShutDown
and
select Reboot.
•
To reset the unit, go to
System > Maintenance >
Shutdown
and select Reset to factory default.
•
To restart the unit, go to
System > Maintenance >
ShutDown
and
select Reboot.
•
To reset the unit, go to
System > Maintenance >
Shutdown
and select Reset to factory default.
