Fortinet FortiGate 60M, Руководство по установке

Страница: 38 / 64

38
01-28008-0111-20050128 Fortinet Inc.
Configuring the networks NAT/Route mode installation
Figure 10: FortiGate-60M NAT/Route mode connections
Configuring the networks
If you are running the FortiGate unit in NAT/Route mode, your networks must be
configured to route all Internet traffic to the IP address of the FortiGate interface to
which they are connected.
• For the internal network, change the default gateway address of all computers and
routers connected directly to your internal network to the IP address of the
FortiGate internal interface.
• For the DMZ network, change the default gateway address of all computers and
routers connected directly to your DMZ network to the IP address of the FortiGate
DMZ interface.
• For the external network, route all packets to the FortiGate WAN1 or WAN 2
interface.
If you are using the FortiGate unit as the DHCP server for your internal network,
configure the computers on your internal network for DHCP.
Make sure that the connected FortiGate unit is functioning properly by connecting to
the Internet from a computer on the internal network. You should be able to connect to
any Internet address.
INTERNAL
DMZ 4 3 2 1
LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100 LINK 100
WAN1 WAN2 PWR STATUS
FortiGate-60M
DMZ
DMZ Network
Mail Server
Web Server
Internal Network
WAN2 WAN1
Internet
Broadband (cable or DSL) T1
Wireless Network
Internal