Fortinet FortiWAN, Руководство пользователя

Страница: 65 / 311

Configuring Network Interface (Network Setting) How to set up your FortiWAN
requires at least one IP address be assigned to localhost of a WAN port for data transmission via the WAN link, which
means at least one subnet in WAN or one subnet in WAN and DMZ is required in routing mode.
IPv4 / IPv6 Static Routing Subnet
Static routing subnets are the subnets connected indirectly to FortiWAN via a router or an L3 switch (See "
Scenarios to
deploy subnets
"). According to the location a subnet deployed to, Static Routing Subnet is divided into:
l
Subnet in WAN: A static routing subnet deployed in WAN, connected to a basic subnet in WAN or basic subnet in
WAN and DMZ.
l
Subnet in DMZ: A static routing subnet deployed in DMZ, connected to a basic subnet in DMZ or basic subnet in
WAN and DMZ.
Next comes a few examples to further illustrate configurations in [Basic Subnet] and [Static Routing Subnet].
Examples of Basic Subnets
[Basic Subnet]: Subnet in WAN
This topology is frequently found where cluster hosts on a IPv4 public subnet are deployed in WAN.
As described in the topology, FortiWAN uses port2 as WAN port with IP address 203.69.118.10. Its netmask obtained
from ISP is 255.255.255.248, and the router's IP address 203.69.118.9. IP addresses that are unlisted in [IP(s) on
localhost], 203.69.118.11 – 203.69.118.14 in this case, can be used for hosts in the subnet in WAN. In this case, IP
addresses 203.69.118.9 – 203.69.118.14 are treated as in near WAN.
[Basic Subnet]: Subnet in DMZ
This topology is frequently found where a cluster of hosts in an IPv4 subnet are deployed in DMZ. Base on the
topology introduced previously, click the [+] button to add a subnet in DMZ.
Remember a subnet in DMZ must
FortiWAN Handbook
Fortinet Technologies Inc. 65