beautypg.com

Connecting the fortigate unit to your networks – Fortinet FortiGate-800 User Manual

Page 46

background image

46

Fortinet Inc.

Connecting the FortiGate unit to your networks

NAT/Route mode installation

9

Set the default route to the Default Gateway IP address (not required for DHCP and
PPPoE).
set system route number dst 0.0.0.0 0.0.0.0 gw1

Example
set system route number 0 dst 0.0.0.0 0.0.0.0 gw1 204.23.1.2

Connecting the FortiGate unit to your networks

After you complete the initial configuration, you can connect the FortiGate unit
between your internal network and the Internet. You can also connect networks to the
user-defined interfaces that you configured.

There are 4 10/100/1000 Base-TX connectors on the FortiGate-800:

• Internal for connecting to your internal network,
• External for connecting to your public switch or router and the Internet,
• DMZ for connecting to a DMZ network,
• HA for connecting to another FortiGate-800 for high availability (see

“High

availability” on page 73

),

There are 4 10/100 Base-TX connectors on the FortiGate-800:

• user-defined interfaces 1 to 4 for connecting up to four additional networks to your

FortiGate unit.

To connect the FortiGate unit running in NAT/Route mode

1

Connect the Internal interface to the hub or switch connected to your internal network.

2

Connect the External interface to your public switch or router.

3

Optionally, connect the DMZ interface to your DMZ network.
You can use a DMZ network to provide access from the Internet to a web server or
other server without installing the servers on your internal network.

Note: You can also create redundant connections to the Internet by connecting two interfaces
to separate Internet connections. For example, you could connect the external interface and the
DMZ interface or any available user-defined interface to different Internet connections, each
provided by a different service provider. See

“Configuration example: Multiple connections to

the Internet” on page 50

.