How to set up your FortiWAN
Configuring Network Interface (Network Setting)
coexist with a subnet in WAN or a subnet in WAN and DMZ
.
As described in the topology, since the cluster of hosts are deployed in DMZ. FortiWAN port5 has to be mapped to
DMZ with IP address 140.112.8.9. Thus the hosts in the subnet take the default gateway as 140.112.8.9. In this case,
IP addresses 203.69.118.9 – 203.69.118.14 are treated as in near WAN, while IP addresses 140.112.8.9 –
140.112.8.14 in DMZ do not belong to near WAN. Check [Enable DHCP] if hosts in the subnet in DMZ require DHCP
service. And enter the starting and ending address in [DHCP Range]. If any host in the subnet uses static IP address,
then in [Static Mapping], enter its IP and MAC address. Similarly, if ISP provides another LAN IPv6 subnet, you can
deploy it in DMZ. The SLAAC and DHCPv6 in FortiWAN are designed to work together, which SLAAC responses router
advertisement (including default gateway and DNS server) to a host and DHCPv6 responses the host an appropriate
IPv6 address. Note: FortiWAN assumes that IP addresses that are unlisted in [IP(s) on Localhost] can be used for
hosts in the subnet.
For the details about DHCP, DHCP Relay, SLAAC and DHCPv6, see "
Automatic addressing within a basic subnet
".
[Basic Subnet]: Subnet in WAN and DMZ
This topology is frequently found where a cluster of hosts in one subnet are deployed in both WAN side and DMZ side.
66
FortiWAN Handbook
Fortinet Technologies Inc.
Содержание FortiWAN
Страница 1: ...FortiWAN Handbook VERSION 4 2 1...
