Filter
Top Products
Configuring Configuring Transparent mode
FortiGate-30B FortiOS 3.0 MR6 Install Guide
01-30006-0459-20080505 25
For an initial configuration, you must edit the factory configured static default route
to specify a different default gateway for the FortiGate unit. This will enable the
flow of data through the FortiGate unit.
For details on adding additional static routes, see the FortiGate Administration
Guide.
To modify the default gateway
config router static
edit <seq_num>
set gateway <gateway_IP>
set device <interface>
end
Adding firewall policies
Firewall policies enable traffic to flow through the FortiGate interfaces. Firewall
policies to define the FortiGate unit process the packets in a communication
session. You can configure the firewall policies to allow only specific traffic, users
and specific times when traffic is allowed.
For the initial installation, a single firewall policy that enables all traffic through will
enable you to verify your configuration is working. On lower-end units such a
default firewall policy is already in place. For the higher end FortiGate units, you
will need to add a firewall policy.
The following steps add two policies that allows all traffic through the FortiGate
unit, to enable you to continue testing the configuration on the network.
To add an outgoing traffic firewall policy
config firewall profile
edit <seq_num>
set srcintf <source_interface>
set srcaddr <source_IP>
set dstintf <destination_interface>
set dstaddr <destination_IP>
set schedule always
set service ANY
set action accept
end
To create an incoming traffic firewall policy, use the same commands with the
addresses reversed.
Note that these policies allow all traffic through. No protection profiles have been
applied. Ensure you create additional firewall policies to accommodate your
network requirements.
Configuring Transparent mode
Configuring Transparent mode involves switching to Transparent mode,
configuring the management IP address, default routes, and simple firewall
policies. You can use the web-based manager or the CLI to configure the
FortiGate unit in Transparent mode.