Fortinet 111 FortiWeb 5.0 Patch 6 Administration Guide
Configuring the network settingsWhen shipped, each of the FortiWeb appliance’s physical network adapter ports (or, for
FortiWeb-VM, vNICs) has a default IP address and netmask. If these IP addresses and
netmasks are not compatible with the design of your unique network, you must configure them.
You also must configure FortiWeb with the IP address of your DNS servers and gateway router.
You can use either the web UI or the CLI to configure these basic network settings.
Network interface or bridge?
To connect to the CLI and web UI, you must assign at least one FortiWeb network interface
(usually port1) with an IP address and netmask so that it can receive your connections.
Depending on your network, you usually must configure others so that FortiWeb can connect to
the Internet and to the web servers it protects.
How should you configure the other network interfaces? Should you add more? Should each
have an IP address? That varies. In some cases, you may not want to assign IP addresses to
the other network interfaces.
Initially, each physical network port (or, on FortiWeb-VM, a vNIC) has only one network interface
that directly corresponds to it — that is, a “physical network interface.” Multiple network
interfaces (“subinterfaces” or “virtual interfaces”) can be associated with a single physical port,
Tabl e 9 : Default IP addresses and netmasks
Network Interface* IPv4 Address/Netmask IPv6 Address/Netmask
port1 192.168.1.99/24 ::/0
port2 0.0.0.0/0 ::/0
port3 0.0.0.0/0 ::/0
port4 0.0.0.0/0 ::/0
* The number of network interfaces varies by model.
If you are installing a FortiWeb-VM virtual appliance, and you followed the instructions in the
FortiWeb-VM Install Guide, you have already configured some of the settings for port1. To fully
configure all of the network interfaces, you must complete this chapter.