FortiGate Administration Guide - FirewallShop.com

Switch (FortiGate-224B only)
Overview
Switch (FortiGate-224B only)
This section describes how to configure the switch portion of your FortiGate-224B
unit. The following topics are included in this section:
• Overview
• Enabling switch view
• Viewing WAN ports and WAN VLAN interfaces
• Viewing switch-LAN ports
• Viewing switch VLANs
• Configuring port monitoring
• Using Spanning-Tree Protocol
• Configuring IGMP snooping
• Configuring QoS
• Configuring port quarantine
• Configuring dynamic policies
• Configuring 802.1X authentication
• Viewing switch status
Overview
The FortiGate-224B unit contains all of the functionality of the Fortinet FortiGate
product family plus it can provide security and enhanced functionality for your
local switched LAN.
The FortiGate-224B firmware has two views:
• firewall view - the unit is the same as other FortiGate models, except that it has
28 network interfaces. This is the default mode.
• switch mode - port1 through port26 are switch ports on the swlan interface.
The web-based manager Switch menu is available, providing access to
enhanced security features. HA is not supported.
The switch portion of the FortiGate-224B unit is by default a single FortiGate
interface, native. You can configure firewall policies to permit communication with
other interfaces, applying antivirus and IPS scanning as needed.
For security within the native network, you have several options:
• Create switch VLANs. Configure firewall policies from each switch VLAN to
other switch VLANs and other interfaces to control and protect traffic.
• Create secure ports on native and its switch VLANs. A secure switch port is
subject to FortiGate firewall policies and protection profiles. Configure firewall
policies to control and protect traffic between switch ports.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 207