在您的内部网络中提DHCP 服务

网络配置

 

 

策略路由

策略路由拓展了目的路由的功能。您可以使用策略路由根据以下内容路由通讯: ·源地址

·协议、服务类型或端口范围 ·进入的或源接口

您可以使用策略路由创建一个路由策略数据库 (RPDB),从一组路由规则中为通讯 找出适当的路由。要为通讯选择一个路由,FortiGate 从头搜索 RPDB 寻找与通讯匹配 的路由策略。搜索到的第一个匹配的策略将被用于设置通讯的路由。路由支持网络跳 跃网关和用于此通讯的 FortiGate 接口。

数据包在匹配目的策略之前先匹配策略路由。如果一个数据包不能匹配策略路由, 它将使用目的路由进行路由。

添加到策略路由的网关必须也添加到一条目的路由。当 FortiGate 设备使用 RPDB 中的一条路由匹配数据包的时候,FortiGate 设备在目的路由表中寻找添加到策略路由 的网关。如果找到了一条匹配的内容,FortiGate 将使用匹配的目的路由记录路由这个 数据包。如果没有找到匹配的内容,FortiGate 将使用常规路由条目进行路由。

在寻找带有匹配的网关的路由的过程中,FortiGate 设备从目的路由表顶部开始搜 索,直到它发现了第一条匹配的路由。这个匹配的路由被用来路由数据包。

关于策略路由的例子,请见 第 43 页 策略路由的例子

策略路由命令

使用以下 CLI 命令配置策略路由。

set system route policy < 路由编号_ 整数> src < _ip> < _ 掩码> iifname <源接口_名称> dst <目的_ip> <目的_掩码> oifname <目的接口_

> protocol < 协议 _ 整数 > port < 低端口 _ 整数 > < 高端口 _ 整数 > gw < 网关 _ip>

在第六卷:FortiGateCLI 参考指南中有关于策略路由语法的完整叙述。

在您的内部网络中提DHCP 服务

如果 FortiGate 设备运行在 NAT/ 路由模式,您可以使用 CLI 命令 set system dhcpserver将FortiGate设备配置为您的内部网络中的DHCP服务器。表 2描述了set system dhcpserver 命令的语法。

表 2: 设置 system dhcpserver 命令语

关键词

说明

 

 

defaultroute <网关_ip>

要为 DHCP 客户端指定的默认路由。默认路由、排除范围、IP 范

 

围和保IP 地址须在内部接口的同一子网内。

dns <dns_ip>

DHCP 客户端可以用来解析域名的 DNS 服务器地址,最多可以设

[<dns_ip>] [<dns_ip>]

置三个。使用格分隔 IP 地址。要删除一个 DNS IP 地址,将

 

IP 设置为 0.0.0.0。

 

 

domain < 域名字符串 >

DHCP 服务器分配给 DHCP 客户端的域名。

122

美国飞塔有限公司

Page 134
Image 134
Fortinet 500 manual 在您的内部网络中提供 Dhcp 服务, 策略路由命令语法, 122

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.