Fortinet FortiGate FortiGate-300A, Руководство администратора

Страница: 141 / 392

System virtual domain Configuring virtual domains
FortiGate-300A Administration Guide 01-28006-0092-20041105
141
6 Select Create new to add firewall policies to the current virtual domain.
See
“Policy” on page 192 . You can only add firewall policies for the physical
interfaces, VLAN subinterfaces, or zones added to the current virtual domain. The
firewall policies that you add are only visible when you are viewing the current virtual
domain. Network traffic accepted by the interfaces and VLAN subinterfaces added to
this virtual domain is controlled by the firewall policies added to this virtual domain
To add firewall addresses to a virtual domain
The following procedure applies to NAT/Route and Transparent mode.
1 Go to System > Virtual domain > Virtual domains .
2 Select Change following the current virtual domain name above the table.
3 Choose the virtual domain for which to configure firewall addresses.
4 Select OK.
5 Go to Firewall > Address .
6 Add new firewall addresses, address ranges, and address groups to the current virtual
domain. See
“Address” on page 200 .
To add IP pools to a virtual domain
The following procedure applies to NAT/Route mode.
1 Go to System > Virtual domain > Virtual domains .
2 Select Change following the current virtual domain name above the table.
3 Choose the virtual domain for which to configure firewall IP pools.
4 Select OK.
5 Go to Firewall > IP Pool .
6 Add new IP pools as required for the current virtual domain. See “IP pool” on
page 221 .
To add Virtual IPs to a virtual domain
The following procedure applies to NAT/Route mode.
1 Go to System > Virtual domain > Virtual domains .
2 Select Change following the current virtual domain name above the table.
3 Choose the virtual domain for which to configure virtual IPs.
4 Select OK.
5 Go to Firewall > Virtual IP .
6 Add new virtual IPs as required for the current virtual domain. See “Virtual IP” on
page 216 .