Fortinet FortiGate Series Administration Guide

Configuring interfaces System Network
FortiGate Version 4.0 MR1 Administration Guide
186 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
3 Configure the loopback interface settings.
The loopback interface must have a Name. You can also configure administrative
access and add a description. See “Interface settings” on page 181.
4 Select OK.
To add a loopback interface - CLI
The CLI command to configure a loopback interface called loop1 with an IP address of
10.0.0.10 is:
config system interface
edit loop1
set type loopback
set ip 10.0.0.10 255.255.255.0
end
For more information, see config system interface in the FortiGate CLI Reference.
Creating an 802.3ad aggregate interface
You can aggregate (combine) two or more physical interfaces to increase bandwidth and
provide some link redundancy. An aggregate interface provides more bandwidth but also
creates more points of failure than redundant interfaces. The interfaces must connect to
the same next-hop routing destination.
Support of the IEEE standard 802.3ad for link aggregation is part of FortiGate firmware on
models 300A, 310B, 400A, 500A, 620B, and models 800 and higher.
An interface is available to be an aggregate interface if:
• it is a physical interface, not a VLAN interface
• it is not already part of an aggregate or redundant interface
• it is in the same VDOM as the aggregated interface
• it does not have a IP address and is not configured for DHCP or PPPoE
• it does not have a DHCP server or relay configured on it
• it does not have any VLAN subinterfaces
• it is not referenced in any firewall policy, VIP, IP Pool or multicast policy
• it is not an HA heartbeat interface
• it is not one of the FortiGate-5000 series backplane interfaces
When an interface is included in an aggregate interface, it is not listed on the System >
Network > Interface screen. You cannot configure the interface individually and it is not
available for inclusion in firewall policies, VIPs, IP pools, or routing.
Note: You can add an accelerated interface (FA2 interfaces) to an aggregate link, but you
will lose the acceleration. For example, if you aggregate two accelerated interfaces you will
get slower throughput than if the two interfaces were separate.
Note: FortiGate-5000 backplane interfaces have to be made visible before they can be
added to an aggregate or a redundant interface.

Fortinet FortiGate Series Specifications

General

Model	FortiGate Series
Category	Firewall
Throughput	Varies by model
Interfaces	Varies by model
Concurrent Sessions	Varies by model
VPN Support	Yes
High Availability	Yes
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
IPS Throughput	Varies by model
NGFW Throughput	Varies by model
Threat Protection Throughput	Varies by model
New Sessions per Second	Varies by model
Power Supply	Varies by model
Security Features	Firewall, IPS, Application Control, Web Filtering, Antivirus, VPN
Virtual Domains	Yes
Form Factor	Desktop, Rackmount