Fortinet Gate 60D, Руководство администратора

Страница: 89 / 706

System Status Topology
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
89
http://docs.fortinet.com/ • Feedback
Adding a subnet object
While editing the topology diagram, you can select the Add Subnet control to define a
subnet object. The object is drawn and connected by a line to the interface associated with
the address.
Figure 43: Adding an existing subnet to the topology diagram
Figure 44: Adding a new subnet to the topology diagram
Select from existing
address/group Create a subnet object based on an existing firewall address. The
object has the name of the firewall address and is connected by a line
to the interface associated with that address. For more information
about firewall addresses, see
“Firewall Address” on page 345 .
Address Name Enter a name to identify the firewall address. Addresses, address
groups, and virtual IPs must have unique names to avoid confusion in
firewall policies.
Connect to interface Select the interface or zone to associate with this address. If the field
already displays a name, changing the setting changes the interface
or zone associated with this existing address.
If the address is currently used in a firewall policy, you can choose
only the interface selected in the policy.
New addresses Create a new firewall address and add a subnet object based on that
address to the topology diagram. The address is associated with the
interface you choose.
Address Name Enter a name to identify the firewall address. Addresses, address
groups, and virtual IPs must have unique names to avoid confusion in
firewall policies.
Type Select the type of address: Subnet/IP Range or FQDN .
Subnet / IP Range If Type is Subnet / IP Range , enter the firewall IP address, followed by
a forward slash and then the subnet mask. Alternatively, enter IP
range start address, followed by a hyphen (-) and the IP range end
address.
FQDN If Type is FQDN , enter the fully qualified domain name.
Connect to interface Select the interface or zone to associate with this address.