Using the command line interface

NAT/Route mode installation

 

 

Using the command line interface

As an alternative to using the setup wizard, you can configure the FortiGate unit using the command line interface (CLI). To connect to the CLI, see “Connecting to the command line interface (CLI)” on page 20.

Configuring the FortiGate unit to operate in NAT/Route mode

Use the information that you gathered in Table 12 on page 34 to complete the following procedures.

Configuring NAT/Route mode IP addresses

1Log into the CLI if you are not already logged in.

2Set the IP address and netmask of the internal interface to the internal IP address and netmask that you recorded in Table 12 on page 34. Enter:

set system interface internal mode static ip <IP address> <netmask>

Example

set system interface internal mode static ip 192.168.1.1 255.255.255.0

3Set the IP address and netmask of the external interface to the external IP address and netmask that you recorded in Table 12 on page 34.

To set the manual IP address and netmask, enter:

set system interface external static ip <IP address> <netmask>

Example

set system interface external mode static ip 204.23.1.5 255.255.255.0

To set the external interface to use DHCP, enter:

set system interface external mode dhcp connection enable

To set the external interface to use PPPoE, enter:

set system interface external mode pppoe username <user name> password <password> connection enable

Example

set system interface external mode pppoe username user@domain.com password mypass connection enable

4Confirm that the addresses are correct. Enter: get system interface

The CLI lists the IP address, netmask and other settings for each of the FortiGate interfaces.

5Set the primary DNS server IP addresses. Enter set system dns primary <IP address>

Example

set system dns primary 293.44.75.21

36

Fortinet Inc.

Page 36
Image 36
Fortinet 50A Using the command line interface, Configuring the FortiGate unit to operate in NAT/Route mode, Example