Configuring the FortiWiFi

Planning the FortiWiFi configuration

Configuring the FortiWiFi

This section provides an overview of the operating modes of the FortiWiFi unit. Before beginning to configure the FortiWiFi unit, you need to plan how to integrate the unit into your network. Your configuration plan is dependent on the operating mode you select: NAT/Route mode or Transparent mode.

This section includes the following topics:

Planning the FortiWiFi configuration

NAT/Route mode installation

Transparent mode installation

Next steps

Planning the FortiWiFi configuration

Before you configure the FortiWiFi unit, you need to plan how to integrate the unit into the network. Among other things, you must decide whether you want the unit to be visible to the network, which firewall functions you want it to provide, and how you want it to control the traffic flowing between its interfaces.

Your configuration plan depends on the operating mode you select. You can configure the FortiWiFi unit in one of two modes: NAT/Route mode (the default) or Transparent mode.

You can also configure the FortiWiFi unit and the network it protects using the default settings.

NAT/Route mode

In NAT/Route mode, the FortiWiFi unit is visible to the network. Like a router, all its interfaces are on different subnets. The following interfaces are available in NAT/Route mode:

Table 7: NAT/Route mode network segments

FortiWiFi Unit

Internal Interface

External

Other

 

 

Interface

 

 

 

 

 

FortiWiFi-60A

Internal

WAN1

DMZ

 

 

WAN2

WLAN

 

 

 

(Modem)

 

 

 

 

FortiWiFi-60AM

Internal

WAN1

DMZ

 

 

WAN2

WLAN

 

 

 

(Modem)

 

 

 

 

You can add firewall policies to control whether communications through the FortiWiFi unit operate in NAT or Route mode. Firewall policies control the flow of traffic based on the source address, destination address, and service of each packet. In NAT mode, the FortiWiFi unit performs network address translation before it sends the packet to the destination network. In Route mode, there is no address translation.

FortiWiFi-60A/AM FortiOS 3.0 MR4 Install Guide

29

01-30004-0283-20070215

Page 29
Image 29
Fortinet ORTIWIFI-60A /AM manual Planning the FortiWiFi configuration, NAT/Route mode