FORTIGATE WEB INTERFACE SOFTWARE SWITCH INTERFACES

These ports share the numbers 15 and 16 with RJ-45 ports. As shown below, the FortiGate-100D (Generation 2) has 22 interfaces.Two of the physical ports on the FortiGate-100D (Generation 2) are SFP ports. They also appear when you are configuring the interfaces, by going to S ys t e m > Network > Interface. Ive deployed the OVF, setup and.In FortiOS, the port names, as labeled on the FortiGate unit, appear in the web-based manager in the U n i t Operation widget, found on the Dashboard. We have 2 fortinet fortigate 40c, with an ipsec vpn tunnel between. During this step, you will create a device entry on the Admin Portal.

These interfaces appear in FortiOS as port amc/sw1, amc/sw2 and so on. This enables you to assign different subnets and netmasks to each of the internal physical interface connections.The larger FortiGate units can also include Advanced Mezzanine Cards (AMC), which can provide additional interfaces (Ethernet or optical), with throughput enhancements for more efficient handling of specialized traffic. Interface mode enables you to configure each of the internal switch physical interface connections separately. Switch mode is the default mode with only one interface and one address for the entire internal switch. The switch mode feature has two states вЂ“ switch mode and interface mode. These ports also share the same MAC address.Con f i gu r i n g the FortiGate-100D portsNormally the internal interface is configured as a single interface shared by all physical interface connections вЂ“ a switch.

Fortigate Web Interface Software Switch Interfaces

If your FortiGate unit supports AMC modules, the interfaces are named amc-sw1/1, amc-dw1/2, and so on.T y p e The configuration type for the interface.I P / N e t m as kВ The current IP address and netmask of the interface.In VDOM, when VDOMs are not all in NAT or transparent mode some val- ues may not be available for display and will be displayed as вЂњ-вЂќ.A ccess The administrative access configuration for the interface.Indicates if the interface can be accessed for administrative purposes. If you have software switch interfaces configured, you will be able to view them. This includes any alias names that have been configured.When you combine several interfaces into an aggregate or redundant inter- face, only the aggregate or redundant interface is listed, not the component interfaces.If you have added VLAN interfaces, they also appear in the name list, below the physical or aggregated interface to which they have been added.If you have added loopback interfaces, they also appear in the interface list, below the physical interface to which they have been added. On FortiOS Carrier, you can also enable the Gi gatekeeper on each interface for anti-overbilling.C r ea t e New Select to add a new interface, zone or, in transparent mode, port pair.For more information on configuring zones, see Zones.Depending on the model you can add a VLAN interface, a loopback inter- face, a IEEE 802.3ad aggregated interface, or a redundant interface.When VDOMs are enabled, you can also add Inter-VDOM links.The names of the physical interfaces on your FortiGate unit. There are different options for configuring interfaces when the FortiGate unit is in NAT mode or transparent mode.

This column is visible when VDOM configuration is enabled.V L A N ID The configured VLAN ID for VLAN subinterfaces.I n t e r f ac e configuration and settingsTo configure an interface, go to S ys t e m > Network > Interface and select C r ea t e New.N a m e Enter a name of the interface. The addressing mode can be manual, DHCP, or PPPoE.S ec ond a r y IP Displays the secondary IP addresses added to the interface.M T U The maximum number of bytes per transmission unit (MTU) for the inter- face.V i r t u a l Domain The virtual domain to which the interface belongs. You cannot change link status from the web-based manager, and typically is indicative of an ethernet cable plugged into the interface.Link status is only displayed for physical interfaces.M od e Shows the addressing mode of the interface. If link status is down the inter- face is not connected to the network or there is a problem with the connection. If link status is up the interface is con- nected to the network and accepting traffic. Link status can be either up (green arrow) or down (red arrow).

Once created, the VLAN interface is listed below its physical inter- face in the Interface list.You cannot change the physical interface of a VLAN interface except when adding a new VLAN interface.Enter the VLAN ID. 3a d Aggregate or R e dund a n t Interface.I n t e r f ac e Displayed when T y p e is set to V L AN.Select the name of the physical interface to which to add a VLAN inter- face. This field appears when editing an existing physical interface.Select the type of interface that you want to add.On some models you can set T y p e to 802. The alias name will not appears in logs.L i n k Status Indicates whether the interface is connected to a network (link status is U p) or not (link status is D o w n). This field appears when editing an existing physical interface.The alias can be a maximum of 25 characters.

Select DHC P to get the interface IP address and other network settings from a DHCP server. If IPv6 configuration is enabled you can add both a IPv4 and an IPv6 IP address. Select M a nu a l and add an I P / N e t m as k for the interface. 3a d aggregate or Redundant interface вЂ“ this section includes available interface and selected interface lists to enable adding or removing interfaces from the interface.Select interfaces from this A va il a b l e Interfaces list and select the right arrow to add an interface to the S e l ec t e d Interface list.A dd r ess i n g mode Select the addressing mode for the interface. S o ft w a r e switch interface вЂ“ this section is a display-only field show- ing the interfaces that belong to the software switch virtual interface.

Select D e d i ca t e to FortiAP/FortiSwitch to have a FortiAP unit orFortiSwitch unit connect exclusively to the interface. This option is available on physical ports not configured for the primary Internet connection. Select O n e- A r m Sniffer to enable the interface as a means to detect possible traffic threats.

FortiGate interfaces cannot have IP addresses on the same subnet.I P v 6 Address If A dd r ess i n g Mode is set to M a nu a l and IPv6 support is enabled, enter an IPv6 address/subnet mask for the interface. This option is not available on the ADSL interface.The FortiSwitch option is currently only available on the FortiGate-100D.If A dd r ess i n g Mode is set to M a nu a l, enter an IPv4 address/subnet mask for the interface. When you enter the IP address, the FortiGate unit auto- matically creates a DHCP server using the subnet entered.

Telnet con- nections are not secure and can be intercepted by a third party.F M G вЂ“ A cces s Allow FortiManager authorization automatically during the com- munication exchange between the FortiManager and FortiGate units.You can configure a FortiGate interface as an interface that will accept FortiClient connections. If configured, this option will also enable the H TT P S option.SS H Allow SSH connections to the CLI through this interface.S N M P Allow a remote SNMP manager to request SNMP information by con- necting to this interface.T E L N E T Allow Telnet connections to the CLI through this interface. Use this setting to verify your installation and for testing.H TT P Allow HTTP connections to the web-based manager through this inter- face. If configured, this option will enable automatically when selecting the H TT P option.P I N G Interface responds to pings.