36 01-28005-0026-20041101 Fortinet Inc.
Connecting the FortiGate unit to the network(s) NAT/Route mode installation
There are three 10/100Base-TX connectors on the FortiGate-3000:
• interfaces 1 and 2 for connecting two networks to the FortiGate-3000.
• interface 3 for connecting a DMZ network or another network to the
FortiGate-3000.
There is also a copper gigabit ethernet connector (4/HA) used to connect to another
FortiGate-3000 for high availability (see “High availability installation” on page 47) or
to connect to a fourth network.
To connect the FortiGate-3000 unit running in NAT/Route mode
1 Connect the Internal interface to the hub or switch connected to the internal network.
2 Connect the External interface to your public switch or router.
3 Optionally, connect interfaces 1, 2, 3, and 4/HA to networks.
Figure 9: FortiGate-3000 NAT/Route mode connections
Note: You can also create redundant connections to the Internet by connecting two interfaces
to separate Internet connections. For example, you could connect the external interface and
interface 1 to different Internet connections, each provided by a different service provider.
POWER
Hi-Temp
12
3
INT
EXT
4/HA
Esc Enter
123 4/HA INTERNAL EXTERNAL
Internet
Internal
External
FortiGate-3000
Internal Network
Port 3
DMZ Network
Mail Server
Web Server
Hub or Switch
Public Switch
or Router
To Next Page
Loading...
