Fortinet FortiGate 3000, Руководство администратора

Страница: 140 / 398

140
01-28006-0010-20041105 Fortinet Inc.
Virtual domain properties System virtual domain
Virtual domain properties
By default, each FortiGate unit runs a virtual domain named root. This virtual domain
includes all of the FortiGate physical interfaces, VLAN subinterfaces, zones, firewall
policies, routing settings, and VPN settings.
Once you add a virtual domain you can configure it by adding VLAN subinterfaces,
zones, firewall policies, routing settings, and VPN settings. You can also move
physical interfaces from the root virtual domain to other virtual domains and move
VLAN subinterfaces from one virtual domain to another.
This process works the same way in NAT/Route and in Transparent mode.
Exclusive virtual domain properties
The following configuration settings are exclusively part of a virtual domain and are
not shared between virtual domains.
• System settings
• Physical interfaces (see “To add physical interfaces to a virtual domain” on
page 144 )
• VLAN subinterfaces (see “To add VLAN subinterfaces to a virtual domain” on
page 145 )
• Zones (see “To add zones to a virtual domain” on page 145 )
• Management IP (Transparent mode) (see “To select a management virtual
domain and add a management IP” on page 144 )
• Routing configuration
• Router configuration in NAT/Route mode (see “To configure routing for a virtual
domain in NAT/Route mode” on page 146 )
• Routing table configuration in Transparent mode (see “To configure the routing
table for a virtual domain in Transparent mode” on page 146 )
• Firewall settings
• Policies (see “To add firewall policies to a virtual domain” on page 146 )
• Addresses (see “To add firewall addresses to a virtual domain” on page 147 )
• Service groups
• IP pools (are associated with an interface) (see
“To add IP pools to a virtual
domain” on page 147 )
• Virtual IPs (are associated with an interface) (see “To add Virtual IPs to a virtual
domain” on page 147 )
• VPN (see “To configure VPN for a virtual domain” on page 148 )
• IPSec
• PPTP
• L2TP
• Certificates