Configuring Network Interface (Network Setting)
How to set up your FortiWAN
As described in the topology, port2 and port5 are connected in dotted line, indicating an IP range in the same subnet
203.69.118.8/29 spreads across WAN (port2) and DMZ (port5). FortiWAN employs Proxy ARP to connect those hosts
becoming in the same network segment (See "
Public IP pass through (DMZ Transparent Mode)
").
Note that although IP address 203.69.118.9 has been configured as default gateway in Basic Setting table, you are
still required to add it in the field [IP(s) in WAN]. When you select [Subnet in WAN and DMZ] from [Subnet Type],
FortiWAN will assume the IP addresses that are unlisted in [IP(s) on Localhost] and [IP(s) in WAN] are all in DMZ.
Thus, in this example, except 203.69.118.10, 203.69.118.9 and 203.69.118.11-203.69.118.12, the rest IP addresses
of subnet 203.69.118.8/29 are assigned to DMZ for Public IP Pass-through. In this case, IP addresses 203.69.118.9 –
203.69.118.12 in WAN side are treated as in near WAN, while IP addresses 203.69.118.13 – 203.69.118.14 in DMZ
side do not belong to near WAN.
Check [Enable DHCP] if hosts in the subnet in DMZ require DHCP service. And enter the starting and ending address
in [DHCP Range]. If any host in the subnet uses static IP address, then in [Static Mapping], enter its IP and MAC
address. Similarly, the configuration to deploy an IPv6 public subnet in WAN and DMZ.
For the details about DHCP, DHCP Relay, SLAAC and DHCPv6, see "
Automatic addressing within a basic subnet
".
[Basic Subnet]: Subnet on Localhost
This topology is found where subnet is designated on FortiWAN to better use Virtual Server.
FortiWAN Handbook
Fortinet Technologies Inc.
67
Содержание FortiWAN
Страница 1: ...FortiWAN Handbook VERSION 4 2 1...
