Fortinet FortiGate FortiGate-5020, Руководство администратора

Страница: 231 / 402

Firewall IP pool
FortiGate-5000 series Administration Guide 01-28008-0013-20050204
231
Virtual IP has the following options.
Configuring IP pools
To add an IP pool
1 Go to Firewall > IP Pool .
2 Select the interface to which to add the IP pool.
You can select a firewall interface or a VLAN subinterface.
3 Select Create New.
4 Enter the IP Range for the IP pool.
The IP range defines the start and end of an address range. The start of the range
must be lower than the end of the range. The start and end of the range must be on
the same subnet as the IP address of the interface to which you are adding the IP
pool.
5 Select OK.
To delete an IP pool
1 Go to Firewall > IP Pool .
2 Select the Delete icon beside the IP pool you want to delete.
3 Select OK.
To edit a IP pool
1 Go to Firewall > IP Pool .
2 For the IP pool that you want to edit, select Edit beside it.
3 Modify the IP pool as required.
4 Select OK to save the changes.
IP Pools for firewall policies that use fixed ports
Some network configurations do not operate correctly if a NAT policy translates the
source port of packets used by the connection. NAT translates source ports to keep
track of connections for a particular service. You can select fixed port for NAT policies
to prevent source port translation. However, selecting fixed port means that only one
connection can be supported through the firewall for this service. To be able to support
multiple connections, you can add an IP pool to the destination interface, and then
select dynamic IP pool in the policy. The firewall randomly selects an IP address from
the IP pool and assigns it to each connection. In this case the number of connections
that the firewall can support is limited by the number of IP addresses in the IP pool.
Interface Select the interface to which to add an IP pool.
Name Enter a name for the IP pool.
IP Range/Subnet Enter the IP address range for the IP pool.