Fortinet FortiGate FortiGate-1000, Руководство администратора

Страница: 202 / 392

202
01-28006-0009-20041105 Fortinet Inc.
Address Firewall
An IP address can be:
• The IP address of a single computer (for example, 192.45.46.45).
• The IP address of a subnetwork (for example, 192.168.1.0 for a class C subnet).
• 0.0.0.0 to represent all possible IP addresses
The netmask corresponds to the type of address that you are adding. For example:
• The netmask for the IP address of a single computer should be 255.255.255.255.
• The netmask for a class A subnet should be 255.0.0.0.
• The netmask for a class B subnet should be 255.255.0.0.
• The netmask for a class C subnet should be 255.255.255.0.
• The netmask for all addresses should be 0.0.0.0
An IP Range address represents:
• A range of IP addresses in a subnet (for example, 192.168.20.1 to 192.168.20.10)
Configuring addresses
To add an address
1 Go to Firewall > Address .
2 Select Create New.
3 Enter a name to identify the address.
4 Enter the IP address and netmask or the IP address range.
5 Select OK.
To edit an address
Edit an address to change its IP information. You cannot edit the address name.
1 Go to Firewall > Address > Address .
2 Select the Edit icon beside the address you want to edit.
3 Make any required changes.
4 Select OK.
To delete an address
Deleting an address removes it from the address list. To delete an address that has
been added to a policy, you must first remove the address from the policy.
1 Go to Firewall > Address > Address .
2 Select the Delete icon beside the address you want to delete.
You cannot delete default addresses.
Note: IP address: 0.0.0.0 and Netmask: 255.255.255.255 is not a valid firewall address.
Note: To change the address name you must delete the address and add it again with a new
name. To avoid confusion in firewall policies, an address and a virtual IP cannot have the same
name.