Connector Type Speed Protocol Description
Internal RJ-45 10/100 Base-T Ethernet Connection to the internal network.
External RJ-45 10/100 Base-T Ethernet Connection to the Internet.
DMZ RJ-45 10/100 Base-T Ethernet Optional connection to a DMZ network, or other
FortiGate-100 units for high availability (HA). For
details, see the Documentation CD-ROM.
Console DB-9 9600 Bps RS-232 Optional connection to the management computer.
Provides access to the command line interface
(CLI).
Place the unit on a stable surface. It requires 1.5 inches (3.75 cm) clearance above and
on each side to allow for cooling.
Plug in power cable to unit before connecting power.
The Status light ashes while the unit is starting up and turns off when the system is up
and running.
•
•
•
Connect the FortiGate unit to a power outlet and to the internal and external networks.
Before beginning to congure the FortiGate unit, you need to plan how to integrate the unit into your network. Your conguration plan depends on the operating mode you select: NAT/Route
mode (the default) or Transparent mode.
NAT/Route mode
In NAT/Route mode, each FortiGate unit is visible to the network that it is connected to. All
of its interfaces are on different subnets. Each interface that is connected to a network must
be congured with an IP
address that is valid for
that network.
You would typically use
NAT/Route mode when
the FortiGate unit is
deployed as a gateway
between private and
public networks. In its
default NAT/Route
mode conguration,
the unit functions as a
rewall. Firewall policies
control communica-
tions through the FortiGate unit. No trafc can pass through the FortiGate unit until you add
rewall policies. In NAT/Route mode, rewall policies can operate in NAT mode or in Route
mode. In NAT mode, the FortiGate unit performs network address translation before IP
packets are sent to the destination network. In Route mode, no translation takes place.
Transparent mode
In Transparent mode, the FortiGate unit is invisible to the network. All of its interfaces are on
the same subnet. You only have to congure a management IP address so that you can make
conguration changes.
You would typically use the
FortiGate unit in Trans-
parent mode on a private
network behind an existing
rewall or behind a router.
In its default Transparent
mode conguration, the unit
functions as a rewall. No
trafc can pass through the
FortiGate unit until you add
rewall policies.
You can connect up to four network segments to the FortiGate unit to control trafc between
these network segments.AAA
Refer to the Documentation CD-ROM for information on how to control trafc, and how to congure HA, antivirus protection, FortiGuard, Web content ltering, Spam ltering,
intrusion prevention (IPS), and virtual private networking (VPN).
FortiGate-100
01-30002-0033-20060705
LED State Description
Power
Green The FortiGate unit is on.
Off The FortiGate unit is off.
Status
Flashing Green The FortiGate unit is starting up.
Green The FortiGate unit is running normally.
Off The FortiGate unit is powered off.
Internal
External
DMZ (front and back)
Green The correct cable is in use and the connected
equipment has power.
Flashing Green
(front)
Flashing Amber
(back)
Network activity at this interface.
Off No link established.
Web-based manager
The FortiGate web-based manager is an easy to use management tool. Use it to congure
the administrator password, the interface and default gateway addresses, and the DNS
server addresses.
Requirements:
An Ethernet connection between the FortiGate unit and management computer.
Internet Explorer 6.0 or higher on the management computer.
•
•
Command Line Interface (CLI)
The CLI is a full-featured management tool. Use it to congure the administrator password,
the interface addresses, the default gateway address, and the DNS server addresses. To
congure advanced settings, see the Documentation CD-ROM.
Requirements:
The DB-9 serial connection between the FortiGate unit and management computer.
A terminal emulation application (HyperTerminal for Windows) on the management
computer.
•
•
To Next Page
Need help?
General