Fortinet ORTIWIFI-60A /AM Adding a Ping Server, Adding firewall policies for modem connections

Page 56

Adding a Ping Server

Configuring the modem interface

Adding a Ping Server

Adding a ping server is required for routing failover for the modem in redundant mode. A ping server confirms the connectivity to an Ethernet interface.

To add a ping server to an interface

1Go to System > Network > Interface.

2Choose an interface and select Edit.

3Set Ping Server to the IP address of the next hop router on the network connected to the interface.

4Select the Enable check box.

5Select OK to save the changes.

Dead gateway detection

The FortiWiFi unit uses dead gateway detection to ping the Ping Server IP address to make sure the FortiWiFi unit can connect to this IP address.

Modify dead gateway detection to control how the FortiWiFi unit confirms connectivity with a ping server added to an interface configuration. For information about adding a ping server to an interface, see above.

To modify the dead gateway detection settings

1Go to System > Network > Options.

2For Detection Interval, type a number in seconds to specify how often the FortiWiFi unit tests the connection to the ping target.

3For Fail-over Detection, type a number of times that the connection test fails before the FortiWiFi unit assumes the gateway is no longer functioning.

4Select Apply.

Adding firewall policies for modem connections

The modem interface requires firewall addresses and policies. You can add one or more addresses to the modem interface. For information about adding addresses, see the FortiGate Administration Guide. When you add addresses, the modem interface appears on the policy grid.

You can configure firewall policies to control the flow of packets between the modem interface and the other interfaces on the FortiWiFi unit. For information about adding firewall policies, see the FortiGate Administration Guide.

56

FortiWiFi-60A/AM FortiOS 3.0 MR4 Install Guide

01-30004-0283-20070215

Image 56
Contents Install G U I D E Trademarks Regulatory complianceContents Configuring the FortiWiFi Configuring the modem interfaceIndex Using a wireless networkFortiWiFi Firmware Page About the FortiWiFi unit FortiWiFi-60A/AMRegister your FortiWiFi unit FortiGuard Subscription ServicesFortinet Family Products FortiClientFortiMail FortiAnalyzerFortiReporter FortiBridgeAbout this document Document conventionsTypographic conventions Addressipv4FortiGate Install Guide Fortinet documentationComments on Fortinet technical documentation Customer service and technical supportFortinet Knowledge Center Customer service and technical support Installing the FortiWiFi unit Package ContentsPowering on the FortiWiFi unit To power on the FortiWiFi unitSpecifications MountingConnecting to the FortiWiFi unit Powering off the FortiWiFi unitCommand line interface To power off the FortiWiFi unitConnecting to the web-based manager To connect to the web-based managerConnecting to the CLI System DashboardQuick installation using factory defaults To connect to the CLIWelcome Bits per second 9600 Data bits ParityGo to System Network Options Quick installation using factory defaults Factory defaults Factory default Dhcp server configuration Factory default NAT/Route mode network configurationFactory default Transparent mode network configuration Factory default firewall configurationFactory default protection profiles Restoring the default settings Restoring the default settings using the web-based managerRestoring the default settings using the CLI To reset the default settings Go to System StatusRestoring the default settings Planning the FortiWiFi configuration NAT/Route modeNAT/Route mode with multiple external network connections Example NAT/Route mode network configurationTransparent mode Example NAT/Route multiple internet connectionNAT/Route mode installation Preparing to configure the FortiWiFi unit in NAT/Route modeDhcp or PPPoE configuration Using the web-based managerNAT/Route mode settings Administrator Password Internal PPPoE setting User name PasswordConfiguring basic settings To configure interfaces Go to System Network InterfaceAdding a default route Verifying the web-based manager configurationUsing the command line interface Configuring the FortiWiFi unit to operate in NAT/Route modeTo add/change the administrator password To configure interfacesExample To set the WAN1 interface to use DHCP, enterTo configure DNS server settings To add a default routeTo set the WAN1 interface to use PPPoE, enter Get system interfaceConnecting the FortiWiFi unit to the networks To connect the FortiWiFi unitConfiguring the networks NAT/Route mode connectionsTransparent mode installation Preparing to configure Transparent modeTransparent mode settings Administrator Password DNS SettingsTo change to Transparent mode using the CLI To verify the DNS server settingsTo connect the FortiWiFi unit running in Transparent mode Reconnecting to the web-based managerConnecting the FortiWiFi unit to your network Next steps Set the date and timeUpdating antivirus and IPS signatures Scheduling antivirus and IPS updates To update IPS signatures using the CLIUpdating the IPS signatures from the CLI EveryTo enable schedule updates from the CLI Adding an override serverDaily WeeklyTo add an override server using the CLI Config system autoupdate override set address Set status EndNext steps Configuring the modem interface Selecting a modem mode Redundant mode configurationStand alone mode configuration To configure the FortiWiFi-60A using the CLIEnter the following to configure the dialup account Configuring modem settings Connecting and disconnecting the modem in Stand alone mode To configure modem settings Go to System Network ModemTo connect to a dial-up account Go to System Network Modem To disconnect the modemConfiguring the modem using the CLI Keywords and variables Description DefaultPeermodem1 Dead gateway detection Adding a Ping ServerAdding firewall policies for modem connections Setting up a wireless network FortiWiFi unit as an Access PointRadio Frequency interface Positioning an Access PointUsing multiple access points Wireless Security Wireless Equivalent Privacy WEPMAC address filtering Wi-Fi Protected Access WPAAdditional security measures FortiWiFi operation modes Service Set IdentifierAccess Point mode To disable Ssid Go to System Wireless SettingsChanging the operating mode Setting up the FortiWiFi unit as an Access PointClient mode Set the security options Set the Dhcp settingsTo set the data security Go to System Wireless Settings Configure the firewall policies Upgrading to a new firmware version Upgrading the firmware using the web-based managerTo upgrade the firmware using the web-based manager Upgrading the firmware using the CLI To upgrade the firmware using the CLIExecute restore image Tftp namestr tftpipv4 Execute restore image image.outExecute update-now Reverting to a previous firmware versionReverting to a previous firmware version using the CLI To revert to a previous firmware version using the CLIExecute restore image Tftp image.out To install firmware from a system reboot Press Any Key To Download Boot Image Press any key to display configuration menuEnter Tftp Server Address Enter Local AddressRestoring the previous configuration Save as Default firmware/Run image without savingD/RFortiUSB key Do You Want To Save The Image? y/nTo restore configuration using the CLI Backup and Restore from the FortiUSB keyTo backup configuration using the CLI Using the USB Auto-Install feature To configure the USB Auto-Install using the CLITo test a new firmware image Testing a new firmware image before installing itAdditional CLI Commands for the FortiUSB key Testing a new firmware image before installing it Type n FortiWiFi unit running v3.x Bios Testing a new firmware image before installing it Index Numerics01-30004-0283-20070215