FortiGate Administration Guide - FirewallShop.com

Switch (FortiGate-224B only)
Configuring port monitoring
MTU
Log
IGMP snooping
This field is available only on physical interfaces. To
improve network performance, you can change the
maximum transmission unit (MTU) of the packets that
the FortiGate unit transmits. Ideally, the MTU should be
the same as the smallest MTU of all the networks
between the FortiGate unit and the destination of the
packets. If the packets that the FortiGate unit sends are
larger, they are broken up or fragmented, which slows
down transmission. Experiment by lowering the MTU to
find an MTU size for best network performance.
To change the MTU, select Override default MTU value
(1500) and enter the maximum packet size. The MTU
size range is 68 to 1500 bytes for manual mode, 576 to
1500 bytes for DHCP mode, and 576 to 1492 bytes for
PPPoE mode.
Select Log to record logs for any traffic to or from the
interface. To record logs you must also enable traffic log
for a logging location and set the logging severity level
to Notification or lower. Go to Log & Report >
Log Config to configure logging locations and types.
Enable to limit flooding of multicast packets to those
ports where clients have joined the relevant groups.
Configuring port monitoring
Switch Port Analysis (SPAN) enables you to analyze network traffic passing
through switch ports by sending a copy of the traffic to a port connected to remote
monitoring equipment.
FortiGate-224B supports two Span sessions: Ingress (traffic to the port) and
Egress (traffic from the port). You configure ports to receive the Ingress and
Egress SPAN session data. You can use one port for both sessions or use two
different ports. For the remaining ports, you choose whether to monitor them in
the Ingress or Egress session or both, or not to monitor them at all.
Note: Egress traffic is stripped of its VLAN ID tag if the Egress port has a different VLAN ID
than the monitored traffic.
Go to Switch > Port > SPAN to configure port monitoring.
Figure 121:Monitoring ports
Monitoring Ports
Ingress Destination
Egress Destination
For each port select None or one of the other ports.
Select None or one of fe01-fe24, ge25, ge26.
Select None or one of fe01-fe24, ge25, ge26.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 213