Fortinet FortiGate 30B - Manual (Page 20)

FortiGate-30B FortiOS 3.0 MR6 Install Guide
20 01-30006-0459-20080505
Configuring NAT mode Configuring
Configuring NAT mode
Configuring NAT mode involves defining interface addresses and default routes,
and simple firewall policies. You can use the web-based manager or the CLI to
configure the FortiGate unit in NAT/Route mode.
Using the web-based manager
After connecting to the web-based manager, you can use the following procedures
to complete the basic configuration of the FortiGate unit. Ensure you read the
section
“Connecting to the web-based manager” on page 18 before beginning.
Configure the interfaces
When shipped, the FortiGate unit has a default address of 192.168.1.99 and a
netmask of 255.255.255.0. for either the Port 1 or Internal interface. You need to
configure this and other ports for use on your network.
To configure interfaces
1 Go to System > Network > Interface.
2 Select the edit icon for an interface.
3 Set the Addressing Mode for the interface.
• For Manual addressing, enter the IP address and netmask for the interface.
• For DHCP addressing, select DHCP and complete the following:
• For PPPoE addressing, select PPPoE, and complete the following:
Distance Enter the administrative distance, between 1 and 255 for the
default gateway retrieved from the DHCP server. The
administrative distance specifies the relative priority of a route
when there are multiple routes to the same destination. A
lower administrative distance indicates a more preferred route.
Retrieve default gateway
from server Enable to retrieve a default gateway IP address from the
DHCP server. The default gateway is added to the static
routing table.
Override internal DNS Enable to use the DNS addresses retrieved from the DHCP
server instead of the DNS server IP addresses on the DNS
page on System > Network > Options. On FortiGate-100
units and lower, you should also enable Obtain DNS server
address automatically in System > Network > Options.
Username Enter the username for the PPPoE server. This may have
been provided by your ISP.
Password Enter the password for the PPPoE server for the above user
name.
Unnumbered Specify the IP address for the interface. If your ISP has
assigned you a block of IP addresses, use one of these IP
addresses. Alternatively, you can use, or borrow, the IP
address of a configured interface on the router. You may need
to do this to minimize the number of unique IP addresses
within your network.
If you are borrowing an IP address remember the interface
must be enabled, or up to function correctly.
Initial Disc Timeout Initial discovery timeout in seconds. The time to wait before
starting to retry a PPPoE discovery. To disable the discovery
timeout, set the value to 0.