Fortinet FortiWiFi FortiWiFi-50B, Инструкция по установке

Страница: 25 / 68

Configuring Configuring Transparent mode
FortiWiFi-50B FortiOS 3.0 MR6 Install Guide
01-30006-0445-20080131
23
For an initial configuration, you must edit the factory configured static default route
to specify a different default gateway for the FortiWiFi unit. This will enable the
flow of data through the FortiWiFi unit.
For details on adding additional static routes, see the FortiGate Administration
Guide .
To modify the default gateway
config router static
edit <seq_num>
set gateway <gateway_IP>
set device <interface>
end
Adding firewall policies
Firewall policies enable traffic to flow through the FortiWiFi interfaces. Firewall
policies to define the FortiWiFi unit process the packets in a communication
session. You can configure the firewall policies to allow only specific traffic, users
and specific times when traffic is allowed.
For the initial installation, a single firewall policy that enables all traffic through will
enable you to verify your configuration is working. On lower-end units such a
default firewall policy is already in place. For the higher end FortiWiFi units, you
will need to add a firewall policy.
The following steps add two policies that allows all traffic through the FortiWiFi
unit, to enable you to continue testing the configuration on the network.
To add an outgoing traffic firewall policy
config firewall profile
edit <seq_num>
set srcintf <source_interface>
set srcaddr <source_IP>
set dstintf <destination_interface>
set dstaddr <destination_IP>
set schedule always
set service ANY
set action accept
end
To create an incoming traffic firewall policy, use the same commands with the
addresses reversed.
Note that these policies allow all traffic through. No protection profiles have been
applied. Ensure you create additional firewall policies to accommodate your
network requirements.
Configuring Transparent mode
Configuring Transparent mode involves switching to Transparent mode,
configuring the management IP address, default routes, and simple firewall
policies. You can use the web-based manager or the CLI to configure the
FortiWiFi unit in Transparent mode.