beautypg.com

Configure a dns server, Adding a default route and gateway – Fortinet FortiGate 310B User Manual

Page 24

background image

FortiGate-310B FortiOS 3.0 MR6 Install Guide

24

01-30006-0472-20080815

Configuring NAT mode

Configuring

To set an interface to use PPPoE addressing

config system interface

edit external

set mode pppoe
set username
set password
set ipunnumbered
set disc-retry-timeout
set padt-retry-timeout
set distance
set defaultgw {enable | disable}
set dns-server-override {enable | disable}

end

The CLI lists the IP address, netmask, and other settings for each of the FortiGate
interfaces.

Configure a DNS server

A DNS server is a service that converts symbolic node names to IP addresses. A
domain name server (DNS server) implements the protocol. In simple terms, it
acts as a phone book for the Internet. A DNS server matches domain names with
the computer IP address. This enables you to use readable locations, such as
fortinet.com when browsing the Internet.

DNS server IP addresses are typically provided by your internet service provider.

To configure DNS server settings

config system dns

set autosvr {enable | disable}
set primary
set secondary

end

Note if you set the autosvr to enable, you do not have to configure the primary

or secondary DNS server IP addresses.

Adding a default route and gateway

A route provides the FortiGate unit with the information it needs to forward a
packet to a particular destination. A static route causes packets to be forwarded to
a destination other than the default gateway. You define static routes manually.
Static routes control traffic exiting the FortiGate unit-you can specify through
which interface the packet will leave and to which device the packet should be
routed.

Note: If you change the IP address of the interface you are connecting to, you must
connect through a web browser again using the new address. Browse to https:// followed by
the new IP address of the interface. If the new IP address of the interface is on a different
subnet, you may have to change the IP address of your computer to the same subnet.