Fortinet FortiGate FortiGate-100 - User Manual

© Copyright 2006 Fortinet Incorporated. All rights reserved.
Products mentioned in this document are trademarks or registered trade-
marks of their respective holders.
Regulatory Compliance
FCC Class A Part 15 CSA/CUS
5 July 2006
INTERNAL
EXTERNAL
DMZ
POWER
STATUS
Back
Front
Power
LED
Internal, External, DMZ
Interfaces
Status
LED
INTERNAL
EXTERNAL
DMZ
POWER
STATUS
DMZ
External
ConsoleDC +12V 5A
Internal
RS-232 Serial
Connection
Power
Connection
DMZ, External, Internal
Interfaces
Null-Modem Cable
(RS-232)
Ethernet Cables:
Orange - Crossover
Grey - Straight-through
Power Cable Power Supply
Documentation
FortiGate-1 00
Copyright 2006 Fo rtinet Inco rporated. A ll rights r eserved.
Trademarks
Products mentione d in this d ocument are trademarks .
Qu i c kS t a rt Gu i d e
INTERNAL
EXTERNAL
DMZ
POWER
STATUS
Optional null modem cable connects to serial port on management computer
Optional straight-through Ethernet cable connects to DMZ network
Straight-through Ethernet cable connects to Internet (public switch, router or modem)
DMZ
External
ConsoleDC +12V 5A
Internal
Straight-through Ethernet cable connects to LAN or switch on internal network
Crossover Ethernet cable connects to management computer on internal network
or
Power cable connects to power supply
Checking the Package Contents
Connecting
Planning the Configuration
Connector Type Speed Protocol Description
Internal RJ-45 10/100 Base-T Ethernet Connection to the internal network.
External RJ-45 10/100 Base-T Ethernet Connection to the Internet.
DMZ RJ-45 10/100 Base-T Ethernet Optional connection to a DMZ network, or other
FortiGate-100 units for high availability (HA). For
details, see the Documentation CD-ROM.
Console DB-9 9600 Bps RS-232 Optional connection to the management computer.
Provides access to the command line interface
(CLI).
Place the unit on a stable surface. It requires 1.5 inches (3.75 cm) clearance above and
on each side to allow for cooling.
Plug in power cable to unit before connecting power.
The Status light ashes while the unit is starting up and turns off when the system is up
and running.
•
•
•
Connect the FortiGate unit to a power outlet and to the internal and external networks.
Before beginning to congure the FortiGate unit, you need to plan how to integrate the unit into your network. Your conguration plan depends on the operating mode you select: NAT/Route
mode (the default) or Transparent mode.
NAT/Route mode
In NAT/Route mode, each FortiGate unit is visible to the network that it is connected to. All
of its interfaces are on different subnets. Each interface that is connected to a network must
be congured with an IP
address that is valid for
that network.
You would typically use
NAT/Route mode when
the FortiGate unit is
deployed as a gateway
between private and
public networks. In its
default NAT/Route
mode conguration,
the unit functions as a
rewall. Firewall policies
control communica-
tions through the FortiGate unit. No trafc can pass through the FortiGate unit until you add
rewall policies. In NAT/Route mode, rewall policies can operate in NAT mode or in Route
mode. In NAT mode, the FortiGate unit performs network address translation before IP
packets are sent to the destination network. In Route mode, no translation takes place.
Transparent mode
In Transparent mode, the FortiGate unit is invisible to the network. All of its interfaces are on
the same subnet. You only have to congure a management IP address so that you can make
conguration changes.
You would typically use the
FortiGate unit in Trans-
parent mode on a private
network behind an existing
rewall or behind a router.
In its default Transparent
mode conguration, the unit
functions as a rewall. No
trafc can pass through the
FortiGate unit until you add
rewall policies.
You can connect up to four network segments to the FortiGate unit to control trafc between
these network segments.AAA
Refer to the Documentation CD-ROM for information on how to control trafc, and how to congure HA, antivirus protection, FortiGuard, Web content ltering, Spam ltering,
intrusion prevention (IPS), and virtual private networking (VPN).
FortiGate-100
01-30002-0033-20060705
LED State Description
Power
Green The FortiGate unit is on.
Off The FortiGate unit is off.
Status
Flashing Green The FortiGate unit is starting up.
Green The FortiGate unit is running normally.
Off The FortiGate unit is powered off.
Internal
External
DMZ (front and back)
Green The correct cable is in use and the connected
equipment has power.
Flashing Green
(front)
Flashing Amber
(back)
Network activity at this interface.
Off No link established.
Router
Internal
Internet
Internal
network
192.168.1.99
192.168.1.3
DMZ
network
10.10.10.1
10.10.10.2
Route mode policies
controlling traffic
between internal networks.
NAT mode polices controlling
traffic between internal networks
.
DMZ
External
204.23.1.5
Choosing a Configuration Tool
Web-based manager
The FortiGate web-based manager is an easy to use management tool. Use it to congure
the administrator password, the interface and default gateway addresses, and the DNS
server addresses.
Requirements:
An Ethernet connection between the FortiGate unit and management computer.
Internet Explorer 6.0 or higher on the management computer.
•
•
Command Line Interface (CLI)
The CLI is a full-featured management tool. Use it to congure the administrator password,
the interface addresses, the default gateway address, and the DNS server addresses. To
congure advanced settings, see the Documentation CD-ROM.
Requirements:
The DB-9 serial connection between the FortiGate unit and management computer.
A terminal emulation application (HyperTerminal for Windows) on the management
computer.
•
•
Internet
Router
Intern al
network
External
Internal
Transparent mode policies controlling
traffic between internal and
external networks.
Gateway to public network
204.23.1.5 192.168.1.1
192.168.1.2
Management IP
192.168.1.3

Summary

FortiGate-100 Quick Start Guide Overview

LED Status Indicators

Describes the meaning of Power, Status, Internal, External, and DMZ LEDs for operational status.

Physical Connectors

Details the RJ-45 and DB-9 connectors and their purposes for network and management connections.

FortiGate-100 Connection and Planning

Physical Connection Steps

Outlines steps for connecting the unit to power and networks, and proper placement for cooling.

NAT;Route Mode Configuration

Explains NAT/Route mode where the unit is visible and interfaces are on different subnets.

Transparent Mode Configuration

Describes Transparent mode where the unit is invisible and interfaces are on the same subnet.

FortiGate-100 Configuration Tools and Setup

Web-based Manager Configuration

Details using the web-based manager for initial configuration of passwords and interfaces.

Command Line Interface (CLI) Configuration

Explains using the CLI for device configuration and advanced settings via serial connection.

Collecting Network Information for Configuration

NAT;Route Mode Network Information

Collects IP and Netmask details for Internal, External, and DMZ interfaces in NAT/Route mode.

Transparent Mode Network Information

Collects Management IP and Netmask for Transparent mode operations.

General Network Settings

Gathers administrator password, default gateway, and DNS server details for network setup.

Factory Default Settings Overview

Provides factory default IP addresses and administrative account settings for reference.

Configuring the FortiGate-100 Unit

Configuring via Web-based Manager

Step-by-step guide for configuring interfaces, passwords, and gateways via the web UI.

Configuring via Command Line Interface (CLI)

Instructions for configuring interfaces, DNS, and gateways using the CLI.

Completing FortiGate Configuration

Fortinet FortiGate FortiGate-100 Specifications

General

Brand	Fortinet
Model	FortiGate FortiGate-100
Category	Firewall
Language	English