Configuring the FortiGate unit NAT/Route mode installation
FortiGate-3000 and FortiGate-3600 FortiOS 3.0MR4 Install Guide
01-30004-0270-20070215 43
Connecting the FortiGate unit to the network(s)
When you have completed the initial configuration, you can connect the FortiGate
unit between your internal network and the Internet.
The following network connections are available on the FortiGate unit:
• Internal for connecting your internal network
• External for connecting to the Internet
• Interface 3 is the interface to the DMZ network
To connect to the FortiGate unit
1 Connect to the Internal interface to the hub or switch connected to your internal
network.
2 Connect the External interface to the Internet.
Connect to the public switch or router provided by your ISP. If you are a DSL or
cable subscriber, connect the External interface to the internal or LAN connection
of your DSL or cable modem.
3 Optionally connect the Interface 3 interface to your DMZ network.
You can use a DMZ network to provide access from the Internet to a web server
or other server without installing the servers on your internal network.
Figure 9: FortiGate-3000 NAT/Route mode connections
Configuring the networks
If you are running the FortiGate unit in NAT/Route mode, your networks must be
configured to route all Internet traffic to the IP address of the interface where the
networks are connected.
• For the internal network, change the default gateway address of all computers
and routers connected directly to your internal network to the IP address of the
FortiGate internal interface.
• For the external network, route all packets to the FortiGate external interface.
Internal network
Internet
Router
(or public switch)
Hub or switch
Hub or switch
DMZ network
Web Server
Mail Server
External
Port 3
Internal
To Next Page
Loading...
