Fortinet Gate 60D, Руководство администратора

Страница: 127 / 706

System Network Interfaces
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
127
http://docs.fortinet.com/ • Feedback
To configure a specific type of interface, refer to the appropriate section. To configure:
• an aggregate interface, see “Creating an 802.3ad aggregate interface” on page 127 .
• a redundant interface, see “Creating a redundant interface” on page 128 .
• a VLAN subinterface, see “FortiGate units and VLANs” on page 151 .
• a wireless interface, see “Adding a wireless interface” on page 163 .
Creating an 802.3ad aggregate interface
You can aggregate (combine) two or more physical interfaces to increase bandwidth and
provide some link redundancy. An aggregate interface provides more bandwidth but also
creates more points of failure than redundant interfaces. The interfaces must connect to
the same next-hop routing destination.
Support of the IEEE standard 802.3ad for link aggregation is part of FortiGate firmware on
models 300A, 310B, 400A, 500A, 620B, and models 800 and higher.
An interface is available to be an aggregate interface if:
• it is a physical interface, not a VLAN interface
• it is not already part of an aggregate or redundant interface
• it is in the same VDOM as the aggregated interface
• it does not have a IP address and is not configured for DHCP or PPPoE
• it does not have a DHCP server or relay configured on it
• it does not have any VLAN subinterfaces
• it is not referenced in any firewall policy, VIP, IP Pool or multicast policy
• it is not an HA heartbeat interface
• it is not one of the FortiGate 5000 series backplane interfaces
MTU To change the MTU, select Override default MTU value (1 500) and enter the
MTU size based on the addressing mode of the interface
•
68 to 1 500 bytes for static mode
• 576 to 1 500 bytes for DHCP mode
• 576 to 1 492 bytes for PPPoE mode
• up to 16 110 bytes for jumbo frames (on FortiGate models that support jumbo
frames)
• NP2-accelerated interfaces support a jumbo frame limit of 16 000 bytes
• FA2-accelerated interfaces do not support jumbo frames
This field is available only on physical interfaces. VLANs inherit the parent
interface MTU size by default.
For more information on MTU and jumbo frames, see
“Interface MTU packet size”
on page 135 .
Secondary IP
Address Add additional IP addresses to this interface. Select the blue arrow to expand or
hide the section. See
“Secondary IP Addresses” on page 136 .
Description Enter a description up to 63 characters.
Administrative
Status Select either Up (green arrow) or Down (red arrow) as the status of this interface.
Up indicates the interface is active and can accept network traffic.
Down indicates the interface is not active and cannot accept traffic.
Note: In Transparent mode, if you change the MTU of an interface, you must change the
MTU of all interfaces to match the new MTU.