Fortinet 60c manual Web-based manager, Command line interface

Page 6

Secure installation, configuration, and management

Introduction

 

 

The CLI or the web-based manager can then be used to complete configuration and to perform maintenance and administration.

Web-based manager

Using HTTP or a secure HTTPS connection from any computer running Internet Explorer, you can configure and manage the FortiGate unit. The web-based manager supports multiple languages. You can configure the FortiGate unit for HTTP and HTTPS administration from any FortiGate interface.

You can use the web-based manager to configure most FortiGate settings. You can also use the web-based manager to monitor the status of the FortiGate unit. Configuration changes made using the web-based manager are effective immediately without resetting the firewall or interrupting service. Once you are satisfied with a configuration, you can download and save it. The saved configuration can be restored at any time.

Figure 1: FortiGate web-based manager and setup wizard

Command line interface

You can access the FortiGate command line interface (CLI) by connecting a management computer serial port to the FortiGate RS-232 serial console connector. You can also use Telnet or a secure SSH connection to connect to the CLI from any network that is connected to the FortiGate unit, including the Internet.

The CLI supports the same configuration and monitoring functionality as the web-based manager. In addition, you can use the CLI for advanced configuration options that are not available from the web-based manager.

This Installation Guide contains information about basic and advanced CLI commands. For a more complete description about connecting to and using the FortiGate CLI, see the FortiGate CLI Reference Guide.

6

01-28008-0018-20050128

Fortinet Inc.

Image 6
Contents Installation Guide January 01-28008-0018-20050128Trademarks Regulatory Compliance Table of Contents Index Secure installation, configuration, and management IntroductionCommand line interface Web-based managerSetup wizard Document conventionsFortiGate Installation Guide FortiGate documentationComments on Fortinet technical documentation Related documentationFortinet Knowledge Center FortiManager documentationCustomer service and technical support FortiMail documentationFortiLog documentation Customer service and technical support Customer service and technical support Getting started Package contents MountingEnvironmental specifications Turning the FortiGate unit power on and offPower requirements To power on the FortiGate unitConnecting to the web-based manager To connect to the web-based managerBits per second 9600 Data bits Parity Connecting to the command line interface CLITo connect to the CLI Stop bits Flow controlQuick installation using factory defaults Go to System Network DNSFactory default FortiGate configuration settings Factory default Dhcp server configurationFactory default NAT/Route mode network configuration Administrative access Factory default Transparent mode network configurationFactory default firewall configuration Management IPFactory default protection profiles StrictScan Planning the FortiGate configuration NAT/Route modeNAT/Route mode with multiple external network connections Example NAT/Route mode network configurationTransparent mode Example NAT/Route multiple internet connection configurationConfiguration options Web-based manager and setup wizardNext steps NAT/Route mode installation Preparing to configure the FortiGate unit in NAT/Route modeUsing the web-based manager Dhcp or PPPoE configurationPPPoE settings User name Password To configure DNS server settings Go to System Network DNS Configuring basic settingsTo configure interfaces Go to System Network Interface To add a default routeTo add/change the administrator password Using the command line interfaceConfiguring the FortiGate unit to operate in NAT/Route mode To configure interfacesExample Get system interfaceUsing the setup wizard To configure DNS server settingsDhcp server Setup wizard settings PasswordExternal Interface Internal serversConnecting the FortiGate unit to the networks Starting the setup wizardSetup wizard settings Antivirus FortiGate-60 NAT/Route mode connections FortiGate-60Configuring the networks Configuring the Modem interfaceTo set the date and time Go to System Config TimeTo configure virus, attack, and spam definition updates To register the FortiGate unitGo to System Maintenance Update Center Transparent mode installation Preparing to configure Transparent modeTo change the Management IP Go to System Network Management Management IPReconnecting to the web-based manager To change to Transparent mode using the CLITo configure the management IP address To configure the default gatewayTo start the setup wizard Connecting the FortiGate unit to your network InternalTo register your FortiGate unit Go to System Maintenance Update Center High availability configuration settings High availability installationConfiguring FortiGate units for HA operation Priorities of heartbeat device and monitor prioritiesGroup ID MAC Address To change the FortiGate unit host name Configuring FortiGate units for HA using the CLI Config system global Set hostname namestr endConnecting the cluster to your networks To configure the FortiGate unit for HA operationHA network configuration To connect the clusterInstalling and configuring the cluster Installing and configuring the cluster Configuring the modem interface Selecting a modem modeRedundant mode configuration Standalone mode configuration To operate in standalone mode Go to System Network ModemAuto-dial Configuring modem settingsMode Redundant forConnecting and disconnecting the modem in Standalone mode To configure modem settings Go to System Network ModemTo connect to a dialup account Go to System Network Modem To disconnect the modem Defining a Ping ServerDead gateway detection ISPAdding firewall policies for modem connections Index CLIIndex