Справочник Пользователя для Fortinet Version 3.0
Setting up FortiBridge units
Connecting and turning on the FortiBridge unit
FortiBridge Version 3.0 Administration Guide
09-30000-0163-20061109
09-30000-0163-20061109
23
Connecting and turning on the FortiBridge unit
In most cases, you can connect the FortiBridge unit without making any
configuration changes to your network or your FortiGate unit. All that is required is
to move and reconnect network cables.
configuration changes to your network or your FortiGate unit. All that is required is
to move and reconnect network cables.
Right out of the box you can connect, power on, and configure the FortiBridge unit
without interrupting network traffic (except for the interruption required to move
and re-connect network cables). When connected and powered on, the
FortiBridge unit operates in Normal mode. Probes are not configured. The
FortiBridge unit does not provide fail open protection until probes are configured.
without interrupting network traffic (except for the interruption required to move
and re-connect network cables). When connected and powered on, the
FortiBridge unit operates in Normal mode. Probes are not configured. The
FortiBridge unit does not provide fail open protection until probes are configured.
Connecting and turning on the FortiBridge-1000 unit
The FortiBridge-1000 unit contains 4 auto-sensing 10/100/1000 Ethernet
interfaces that connect to the internal and external networks and to the FortiGate
interfaces that were connected to these networks. Use the following steps to
connect a FortiBridge-1000 unit to the network as shown in
interfaces that connect to the internal and external networks and to the FortiGate
interfaces that were connected to these networks. Use the following steps to
connect a FortiBridge-1000 unit to the network as shown in
Figure 11
.
Figure 11: Connecting the FortiBridge-1000 unit
Note: The default FortiBridge management IP address is 192.168.1.99. If this IP address
conflicts with an IP address on your network, you can use the procedure
conflicts with an IP address on your network, you can use the procedure
Note: This procedure describes how to connect a FortiBridge-1000 unit to provide fail open
protection for network traffic passing between FortiGate unit internal and external
interfaces. If the FortiBridge-1000 unit provides fail open protection for traffic between
different FortiGate interfaces, you can use the same procedure but substitute FortiGate
interface names as required.
protection for network traffic passing between FortiGate unit internal and external
interfaces. If the FortiBridge-1000 unit provides fail open protection for traffic between
different FortiGate interfaces, you can use the same procedure but substitute FortiGate
interface names as required.
Router
INT 1
INT 2
EXT 1
EXT 2
Internal
External
(Transparent mode)
Internal network
Internet
Switch
Switch
INT 2
EXT 2
DC+5V
PWR
CONSOLE
TO FORTIGATE
INT 1
EXT 1
Ethernet connection to FortiGate Internal interface
Power cable connects to power supply
Ethernet connection to FortiGate External interface
Ethernet connection to External network
Ethernet connection to Internal network
Optional RJ-45 serial cable connects to management computer
Note: Normally, you would use straight-through ethernet cables to connect the
FortiBridge-1000 unit to the FortiGate unit and to your networks. However, for some
connections you may need a crossover ethernet cable (for example, for compatibility with
network devices that do not support Auto MDI/MDIX).
FortiBridge-1000 unit to the FortiGate unit and to your networks. However, for some
connections you may need a crossover ethernet cable (for example, for compatibility with
network devices that do not support Auto MDI/MDIX).