配置虚拟局域网 (VLAN)

网络配置

 

 

4 设置 MTU 尺寸 。

可以将最大的数据包尺寸设定在 68 字节到 1500 字节之间。默认的 MTU 尺寸是 1500 字 节。您可以试着减小 MTU 的尺寸以找到网络性能最高的时对应的 MTU 尺寸。

配置管理接口 (透明模式)

在透明模式下,您可以配置 FortiGate 用于管理访问的管理接口。

1 进入 系统 > 网络 > 管理

2 根据需要修改管理用的 IP 地址 子网

设置的 IP 地址和子网掩码必须是您用来管理 FortiGate 的网络中的有效地址和掩码。

3 如果 FortiGate 必须通过一个默认网关才能连接到管理员计算机,则需要添加一个默

认网关。

4 选择每个网络接口的 管理访问方式

HTTPS

允许安全 HTTPS 连接通过此接口连接到 基于 Web 的管理程序。

PING

如果您希望网络接口对 PING 作出响应,选中此项。用于验证您的安装和测试。

SSH

允许安全 SSH 连接通过此接口连接到 CLI。

SNMP

允许远程 SNMP 管理者连接到这个接口请求 SNMP 信息。见 第 137 页 配置

 

SNMP

5 单击 应用 以保存您所做的修改。

配置虚拟局域网 (VLAN)

使用 VLAN 技术,单一 FortiGate 可以多个安全域提供安全服务和连接控制。来自 每个安全域的数据流被赋予一个不同的 VLAN ID。FortiGate 可以 VLAN ID 并对安全网 络和每个安全域间的 IPSec VPN 数据流应用安全策略。它还可以为 VLAN 标识的网络和 安全域之间的 VPN 数据流提供认证、内容过滤和防病毒保护。

本节描述了一个基本的 VLAN 网络配置,概述了如何配置支持 VLAN 的 FortiGate。 并且,描述了如何添加 VLAN 子网络接口。VLAN 子网络接口的功能类似于任何一个 FortiGate 网络接口。您可以为 VLAN 子网络接口添加防火墙地址以把它添加进策略网 格。您还可以将 VLAN 子网络接口添加到区域。

FortiGate 只有在 NAT/ 路由模式中才支持 VLAN。

本节描述了如下内容:

·VLAN 网络配置

·添加 VLAN 子网络接口

VLAN 网络配置

FortiGate 支持服从 IEEE802.1Q 标准的虚拟局域网 (VLAN)标签。VLAN 标签是添 加到以太网帧头的一个序列号,它标识了这个帧属于哪个特定的 VLAN。

FortiGate 不添加或者改变 VLAN 标签。然而,您可以把它配置为可以分割 VLAN 标 签数据包,或者应用策略以控制它们通过防火墙的连接方式。

116

美国飞塔有限公司

Page 128
Image 128
Fortinet 500 manual 配置虚拟局域网 (Vlan), 配置管理接口 (透明模式), Vlan 网络配置, 116, ·VLAN 网络配置 ·添加 Vlan 子网络接口

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.