Fortinet fortigate-50r Installationsanweisungen

Seite von 240
36
Fortinet Inc.
Using the command line interface
NAT/Route mode installation
Using the command line interface
As an alternative to using the setup wizard, you can configure the FortiGate unit using 
the command line interface (CLI). To connect to the CLI, se
.
Configuring the FortiGate unit to operate in NAT/Route mode
Use the information that you gathered in 
 to complete the 
following procedures.
Configuring NAT/Route mode IP addresses
1
Log into the CLI if you are not already logged in.
2
Set the IP address and netmask of the internal interface to the internal IP address and 
netmask that you recorded in 
. Enter:
set system interface internal mode static ip <IP address> 
<netmask>
Example
set system interface internal mode static ip 192.168.1.1 
255.255.255.0
3
Set the IP address and netmask of the external interface to the external IP address 
and netmask that you recorded in 
To set the manual IP address and netmask, enter:
set system interface external static ip <IP address> <netmask>
Example
set system interface external mode static ip 204.23.1.5 
255.255.255.0
To set the external interface to use DHCP, enter:
set system interface external mode dhcp connection enable
To set the external interface to use PPPoE, enter:
set system interface external mode pppoe username <user name> 
password <password> connection enable
Example
set system interface external mode pppoe username 
user@domain.com password mypass connection enable
4
Confirm that the addresses are correct. Enter:
get system interface
The CLI lists the IP address, netmask and other settings for each of the FortiGate 
interfaces.
5
Set the primary DNS server IP addresses. Enter
set system dns primary <IP address>
Example
set system dns primary 293.44.75.21
6
Optionally, set the secondary DNS server IP addresses. Enter
set system dns secondary <IP address>
Example
set system dns secondary 293.44.75.22