Fortinet FortiWAN, Руководство пользователя

Страница: 80 / 311

How to set up your FortiWAN Configuring Network Interface (Network Setting)
When FortiWAN switches to master mode, it automatically starts WAN link health detection. When it switches to
backup mode, it automatically stops WAN link health detection and sets WAN status to "failed".
In addition, DHCP servers in LAN and DMZ should let clients use FortiWAN virtual IP and the default gateway (as
FortiWAN's DHCP service does). If RIP and OSPF is used in LAN, FortiWAN uses real IP at OSPF and virtual IP at RIP
to exchange route information. Clone-MAC settings will be ignored if VRRP function is enabled. FortiWAN doesn't
exchange NAT table with VRRP peers. When VRRP master changes, existing connection might break.
Local Priority :
The priority field specifies the sending VRRP router's priority for the virtual
router. Select a number from 1 to 254 as the priority for the VR.
Advertisement Interval : Set the time interval in centi-seconds between advertisements. (Default is
100)
Virtual address : Enter a virtual IP address for the virtual router.
Double-check Link :
Click the checkbox to enable. When enabled, the backup router will check
whether the master is responding ARP on the specified WAN port.
See also
l
Scenarios to deploy subnets
l
VLAN and Port Mapping
l
Summary
l
RIP & OSPF Status
WAN/DMZ Private Subnet
After having gone through public subnet configurations, let's move to private subnet settings. This section lists a few
typical topology structures for private subnet. Similarly, FortiWAN supports two different types of private subnet
according to the deployment, direct or indirect connecting to FortiWAN.The two settings are configured from [Basic
Subnet] and [Static Routing Subnet]. FortiWAN supports both IPv4 and IPv6 for the two private subnet types.
On its UI, [IPv4 Basic Subnet] and [IPv6 Basic Subnet] could be one of:
l
Subnet in WAN
l
Subnet in DMZ
l
Subnet in WAN and DMZ
l
Subnet on Localhost (Not support in [IPv6 Basci Subnet])
And [IPv4 Static Routing Subnet] and [IPv6 Static Routing Subnet] could be one of:
l
Subnet in WAN
l
Subnet in DMZ
[Basic Subnet]: Subnet in WAN
This topology is frequently found where cluster hosts in the IPv4 private subnet are located on the WAN. In this
example, FortiWAN port2 has been mapped to WAN port, with IP 192.168.3.1. Select [Subnet in WAN] from [Subnet
80 FortiWAN Handbook
Fortinet Technologies Inc.