配置举例:到互联网的多重连接

 

 

 

 

NAT/ 路由 模式安装

 

 

 

 

 

 

 

 

 

表 13: 负载分配路由

 

 

 

 

 

 

 

 

 

 

 

 

 

 

目的 IP

掩码

网关 #1

设备 #1

网关 #2

 

设备 #2

 

 

 

 

 

 

 

 

 

100.100.100.0

255.255.255.0

1.1.1.1

external

2.2.2.1

 

dmz

 

 

 

 

 

 

 

 

 

200.200.200.0

255.255.255.0

2.2.2.1

dmz

1.1.1.1

 

external

 

 

 

 

 

 

 

 

第一条路由将所有的到100.100.100.0 的通讯定向到外部接口上IP 为1.1.1.1 的网 关 1。如果这条路由不通,到 100.100.100.0 的网络的通讯将被重定向到 DMZ 接口上 IP 地址为 2.2.2.1 的网关 2。

负载分配与主连接、备份连接

您可以将这些路由组合到一个更加复杂的到互联网多重连接的配置中。在 第 40 页 图 9 中所显示的拓扑结构中,内部网络中的用户需要连接到互联网上访问网页, 或者其他互联网资源。然而,他们也可能要访问由他们的 ISP 所提供的其他服务,例 如电子邮件。您可以将上述例子中的路由方法组合起来,为用户提供一个到互联网的 主连接和一个备份连接 , 并根据需要将通讯分配到每个 ISP 的网络上。

下面所描述的路由允许内部网络中的用户通过网关 1 和 ISP1 访问互联网。同时, 这个用户还可以通过 ISP2 的网关 2 去访问他的电子邮件服务器。

使用 基于 Web 的管理程序添加路由

1 进入 系统 > 网络 > 路由表

2 单击新建以添加到互联网的主连接和备份连接的默认路由。

·目的 IP: 0.0.0.0

·掩码 : 0.0.0.0

·网关 #1: 1.1.1.1

·网关 #2: 2.2.2.1

·设备 #1: 外部

·设备 #2: dmz ·单击确定。

3 单击新建以添加到 ISP1 的网络的路由。 ·目的 IP: 0.0.0.0

·掩码 : 0.0.0.0

·网关 #1: 1.1.1.1

·网关 #2: 2.2.2.1

·设备 #1: 外部

·设备 #2: dmz

42

美国飞塔有限公司

Page 54
Image 54
Fortinet 500 manual 负载分配与主连接、备份连接, 使用 基于 Web 的管理程序添加路由 进入 系统 网络 路由表。

500 specifications

Fortinet 500 is a next-generation firewall (NGFW) that is part of Fortinet's acclaimed FortiGate family, designed to provide advanced security for medium to large enterprises. This appliance is known for its high performance, flexibility, and ability to protect networks from a variety of cyber threats through its robust features and technologies.

One of the main features of the Fortinet 500 is its integrated security capabilities. It combines multiple security functions into a single device, allowing organizations to manage everything from intrusion prevention and antivirus to web filtering and application control. This integration leads to simplified management and increased efficiency, as users can address multiple security needs without deploying multiple devices.

The Fortinet 500 runs on the FortiOS operating system, which is known for its simplicity and user-friendliness. FortiOS provides a centralized management interface that allows for the easy configuration and monitoring of security policies across the entire network. Additionally, the Fortinet management tools, such as FortiManager and FortiAnalyzer, enable detailed insights and reporting capabilities, helping organizations stay compliant with their security mandates.

Another characteristic that sets Fortinet 500 apart is its advanced threat intelligence, powered by the FortiGuard Labs. This global threat intelligence system continuously updates the firewall with the latest threat signatures and attack vectors, ensuring that organizations stay ahead of emerging threats. The firewall also employs machine learning and artificial intelligence to detect and mitigate sophisticated attacks in real-time.

Performance is crucial in any security appliance, and the Fortinet 500 does not disappoint. With hardware acceleration and purpose-built security processors, it delivers high throughput levels, enabling organizations to maintain productivity without sacrificing security. This level of performance is particularly beneficial in environments with heavy traffic and bandwidth demands.

In addition to these core features, the Fortinet 500 supports seamless integration with other security solutions within the Fortinet Security Fabric. This comprehensive approach allows for greater visibility and control over the entire security posture of an organization.

Overall, the Fortinet 500 is a powerful NGFW that offers a blend of advanced security features, ease of management, top-notch performance, and robust threat intelligence. Its ability to adapt to the ever-evolving landscape of cybersecurity makes it a valuable asset for businesses seeking to safeguard their digital assets and ensure seamless network operation.