Interface configuration
Port 1 Interface:
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 2 Interface:
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 3 Interface:
IP:
____.____.____.____
Netmask:
____.____.____.____
Port 4 interface:
IP:
____.____.____.____
Netmask:
____.____.____.____
The interface IP address and netmask must be valid for the internal network.
General settings
Administrator password:
Network Settings:
Default Gateway:
____.____.____.____
Primary DNS Server:
____.____.____.____
Secondary DNS Server:
____.____.____.____
Factory default settings
Port 1 interface
192.168.1.99
Administrative account settings
Port 2 interface
0.0.0.0
User name
admin
Port 3 interface
0.0.0.0
Password
(none)
Port 4 interface
0.0.0.0
Web-based Manager
Connect the FortiManager system interface to a management computer Ethernet
interface. Use a cross-over Ethernet cable to connect the devices directly. Use straight-
through Ethernet cables to connect the devices through a hub or switch.
Configure the management computer to be on the same subnet as the internal interface
of the FortiManager system. To do this, change the IP address of the management
computer to 192.168.1.2 and the netmask to 255.255.255.0.
To access the FortiManager system web-based manager, start Internet Explorer and
browse to https://192.168.1.99 (remember to include the “s” in https://).
Type admin in the Name field and select Login (no password required).
Changing an Administrator Password
To change the administrator password
In System Settings, go to
Administration > Administrators
.
Select Edit.
Select Change Password.
Enter and confirm the password.
Select OK.
Configuring the IP Address and Netmask
To configure the IP address
In System Settings, go to
Network > Interface
.
Select Edit.
Enter the IP address and netmask.
Select OK.
Configuring the Default Gateway
To configure the default gateway
In System Settings, go to
Network > Routing Table
.
Enter the gateway IP address and netmask.
Enter the Destination IP and select the Interface.
Select OK.
Adding a FortiGate unit
Before you can manage a FortiGate unit, you must add it to the Device Manager. Adding an
existing operational device will not result in an immediate connection to the device. Device
connection only happens when you successfully resync the device.
To add a FortiGate device
In Device Manager, got to
Device > Add Device
from the main toolbar.
Enter the following information and select Discover.
IP Address
Enter the IP Address of the device to add.
Discover via
Select a method used to find the device. Currently, only CLI (via
SSH) is supported. By using the CLI (via SSH) Method, Device
Manager is able to record each device being added.
Admin user
Select Default (admin) if the device uses the default “admin” as its
admin user.
Select Other and enter the admin user name if the device uses a
different user name other than the default “admin”.
Password
Enter the password for the admin user.
The discovery process starts. When it completes, the Add New Device page appears.
Verify the information and add a Description if desired.
Select Add.
1.
2.
3.
4.
1.
2.
3.
4.
5.
1.
2.
3.
4.
1.
2.
3.
4.
1.
2.
3.
4.
Command Line Interface
Use the DB-9 serial cable to connect the FortiManager System Console port to the
management computer serial port.
Start a terminal emulation program (HyperTerminal) on the management computer. Use
these settings:
Baud Rate (bps) 9600, Data bits 8, Parity None, Stop bits 1, and Flow Control None.
At the Login: prompt, type admin and press Enter twice (no password required).
Changing an Administrator Password
To change the administrator password, enter the following commands
config fmsystem admin user
edit admin
set password <password>
end
Configuring the IP Address and Netmask
To configure the IP address and netmask, enter the following commands
config fmsystem interface
edit port1
set ip <intf_ip>/<netmask_ip>
end
Configuring the Default Gateway
To configure the default gateway, enter the following commands
config fmsystem route
edit <route_number>
set device {port1 | port2}
set dst <ip_address>/<netmask_ip>
set gateway <ip_address>
end
1.
2.
3.
4.
Collecting Information
Configuring
You have finished configuring the basic settings. You are now ready to add and manage FortiGate units. You can also add FortiClient installations and manager firmware updates and
IPS updates as well as many more management configurations and options. To explore the full range of configuration options, see the online help or the Tools and Documentation CD.
Configure the FortiGate unit to be managed through a FortiManager server. Communica
-
tion between the FortiGate unit and the FortiManager server is via an IPSec VPN that is
invisibly pre-configured on the FortiGate unit.
To configure the FortiGate unit
Log in to the FortiGate unit.
Go to
System > Admin > FortiManager
.
Complete the configuration and select OK.
1.
2.
3.