Fortinet FortiWAN - WAN Type: Routing Mode Example 2

Configuring Network Interface (Network Setting) How to set up your FortiWAN
8.
In the IPv4 Basic Subnet section select the Subnet Type as “Subnet in WAN and DMZ”, as follows:
l For IP(s) on Localhost field, enter [211.102.30.253].
l For IP(s) in WAN field, enter [211.102.30.70-211.102.30.99].
l In the Netmask field, enter [255.255.255.0].
l In the DMZ Port field, enter [Port 2].
9.
Configuration complete.
Note: This example shows all addresses are in DMZ (211.102.30.1-211.102.30.69, 211.102.30.100-211.102.30.252),
except those specified in the “IP(s) in WAN” .
WAN Type: Routing Mode Example 2
This example shows the scenario where a private subnet between the WAN router and FortiWAN. In addition, the
public IP subnet inside the FortiWAN DMZ port requires a router.
Sample Configuration:
l Assume the private IP subnet (192.168.0.0/24) is between the WAN link router and FortiWAN WAN port.
l FortiWAN's port 1 IP (192.168.0.253) is connected to the WAN link router (192.168.0.254).
l FortiWAN's Port 3 is DMZ with a public IP subnet (211.20.103.254/24).
l The LAN part behind FortiWAN has another public IP subnet (211.20.104.0/24 behind a router (211.20.103.253).
Configuration Steps:
1.
In the UI: [System] → [Network Settings] → [WAN Settings] sub-function.
2.
Select "1" on the WAN Link menu and select [Enable].
3.
In the WAN Type scroll menu, select [Routing Mode].
4.
In the WAN Port field, enter [Port 1].
5.
Enter the corresponding up and down stream bandwidths.
6.
In the IPv4 Gateway field, enter [192.168.0.254].
7.
In the IPv4 Basic Subnet function, use [+] to create new rules, and select [subnet in DMZ] in the Subnet Type
field.
8.
In the IP(s) on Localhost field, enter [211.20.103.254].
FortiWAN Handbook
Fortinet Technologies Inc.
87