Fortinet Fortiwifi fortiwifi-60, Руководство администратора

Страница: 56 / 394

56
01-28006-0014-20041105 Fortinet Inc.
DNS System network
Controlling administrative access to a FortiWiFi interface connected to the Internet
allows remote administration of the FortiWiFi unit from any location on the Internet.
However, allowing remote administration from the Internet could compromise the
security of the FortiWiFi unit. You should avoid allowing administrative access for an
interface connected to the Internet unless this is required for your configuration. To
improve the security of a FortiWiFi unit that allows remote administration from the
Internet:
• Use secure administrative user passwords,
• Change these passwords regularly,
• Enable secure administrative access to this interface using only HTTPS or SSH,
• Do not change the system idle timeout from the default value of 5 minutes (see
“To
set the system idle timeout” on page 89 ).
Figure 10: Management
To configure the management interface
1 Go to System > Network > Management .
2 Enter the Management IP/Netmask.
3 Enter the Default Gateway.
4 Select the Management Virtual Domain.
5 Select Apply.
The FortiWiFi unit displays the following message:
Management IP address was changed. Click here to redirect.
6 Click on the message to connect to the new Management IP.
DNS
Several FortiWiFi functions, including Alert E-mail and URL blocking, use DNS. You
can add the IP addresses of the DNS servers to which your FortiWiFi unit can
connect. DNS server IP addresses are usually supplied by your ISP.
Management
IP/Netmask Enter the management IP address and netmask.
This must be a valid IP
address for the network that you want to manage the FortiWiFi unit
from.
Default
Gateway Enter the default gateway address.
Management
Virtual Domain Select the virtual domain from which you want to perform system
management.