NAT/Route mode installation Connecting the FortiGate unit to your networks
FortiGate-400 Installation and Configuration Guide 49
Connecting the FortiGate unit to your networks
When you have completed the initial configuration, you can connect the FortiGate unit
between your internal network and the Internet.
The FortiGate-400 has four 10/100Base-TX connectors that can be connected to up
to four different networks. You can connect them in any configuration. When you first
power on the FortiGate-400, the interfaces and zones are configured for the following
connections:
• interface 1 to connect to your internal network,
• interface 2 to connect to your public switch or router and the Internet,
• interface 3 to connect to a DMZ network,
• interface 4/HA to connect to another FortiGate-400 for high availability (see “High
availability” on page 75) or to connect to a fourth network.
To connect the FortiGate unit running in NAT/Route mode:
1Connect interface 1 to the hub or switch connected to your internal network.
2Connect interface 2 to the public switch or router provided by your Internet Service
Provider.
3Optionally connect interface 3 to your DMZ network.
You can use a DMZ network to provide access from the Internet to a web server or
other server without installing the servers on your internal network.
4Optionally connect the 4/HA interface to a fourth network (not shown in Figure7).
Note: You can also create redundant connections to the internet by connecting two interfaces
to separate Internet connections. For example, you could connect interface 2 and 3 to different
Internet connections, each provided by a different service provider. See “Configuration
example: Multiple connections to the Internet” on page 52.