Firewall configuration

IP pools

 

 

Authentication

Optionally select Authentication and select a user group to require

 

users to authenticate with the firewall before accessing the server

 

using port forwarding.

Log Traffic

Select these options to log port-forwarded traffic and apply antivirus

Anti-Virus & Web filter and web filter protection to this traffic.

4Select OK to save the policy.

IP pools

An IP pool (also called a dynamic IP pool) is a range of IP addresses added to a firewall interface. If you add IP pools to an interface, you can select Dynamic IP Pool when you configure a policy with the destination set to this interface. You can add an IP pool if you want to add NAT mode policies that translate source addresses to addresses randomly selected from the IP pool rather than being limited to the IP address of the destination interface.

If you add an IP pool to the internal interface, you can select Dynamic IP pool for policies with the internal interface as the destination. For example, you can add IP pools to External->Internal and DMZ->Internal policies.

You can add multiple IP pools to any interface but only the first IP pool is used by the firewall.

This section describes:

Adding an IP pool

IP Pools for firewall policies that use fixed ports

IP pools and dynamic NAT

Adding an IP pool

To add an IP pool

1Go to Firewall > IP Pool.

2Select the interface to which to add the IP pool.

You can select a firewall interface or a VLAN subinterface.

3Select New to add a new IP pool to the selected interface.

4Enter the Start IP and End IP addresses for the range of addresses in the IP pool.

The start IP and end IP must define the start and end of an address range. The start IP must be lower than the end IP. The start IP and end IP must be on the same subnet as the IP address of the interface that you are adding the IP pool.

5Select OK to save the IP pool.

FortiGate-800 Installation and Configuration Guide

213

Page 213
Image 213
Fortinet FortiGate-800 manual IP pools, Adding an IP pool, 213, To add an IP pool Go to Firewall IP Pool