FortiGate Administration Guide - FirewallShop.com

Enabling switch view
Switch (FortiGate-224B only)
• Use access control to enforce security requirements on host computers that
connect to switch LAN ports. You can require hosts to run antivirus or firewall
software and ensure that their operating system is up-to-date. There are
several options, including quarantine, to address hosts that do not meet the
requirements.
• Create quarantine policies to isolate ports that trigger AV or IPS alerts.
• Use IEEE 802.1X authentication on your network.
There are also features to improve the operation of your network:
• Spanning-Tree Protocol prevents network loops and provides reliable
operation through path redundancy
• IGMP snooping improves the efficiency of multicasting
• Quality of Service (QoS) controls use of network bandwidth
Enabling switch view
You must enable switch view to make the switch features available and to enable
you to create intra-VLAN firewall policies. You must use the CLI to enable switch
view.
To enable switch view
In the CLI, enter the following commands:
config system global
set switch-view enable
end
When asked if you want to continue, respond y. The system resets and restores
factory default values. You might have to use the console to restore the
appropriate IP address and enable administrative access for the web-based
manager.
To return to firewall mode, use the CLI commands shown above, but set
switch-view to disable.
Viewing WAN ports and WAN VLAN interfaces
FortiGate-224B WAN1 and WAN2 ports are the same as network interfaces on
other FortiGate models. Go to System > Network > Interface to view and
configure the WAN ports and WAN VLAN interfaces. See “Interface” on page 79.
Note: Virtual Domain (VDOM) and Transparent mode do not apply to the FortiGate-224B.
FortiGate Version 3.0 MR5 Administration Guide
208 01-30005-0203-20070830