FortiGate Administration Guide - FirewallShop.com

Interface
System Network
Type
Interface
Physical
Interface
Members
VLAN ID
Virtual Domain
Addressing
mode
IP/Netmask
DDNS
Ping Server
On models 800 and higher, you can create VLAN, 802.3ad Aggregate,
and Redundant interfaces.
• On FortiWiFi-50B, 60A, 60AM, and 60B units, you can support up to
four SSIDs by adding up to three wireless interfaces (for a total of
four wireless interfaces).
• On the 60ADSL model, you can configure an ADSL interface.
• Other models support creation of VLAN interfaces only and have no
Type field.
• To configure an ADSL interface, see “Configuring an ADSL interface”
on page 85.
• To create a VLAN subinterface, see “FortiGate units and VLANs” on
page 107.
• To create an aggregate interface, see “Creating an 802.3ad
aggregate interface” on page 86.
• To create a redundant interface, see“Creating a redundant interface”
on page 87.
• To create a wireless interface, see “Adding a wireless interface to a
FortiWiFi-50B, 60A, 60AM, and 60B unit” on page 122.
You cannot change the type of an existing interface.
Select the name of the physical interface on which to create the VLAN.
Once created, the VLAN subinterface is listed below its physical
interface in the Interface list.
You cannot change the interface of an existing VLAN subinterface.
This field is only displayed when Type is set to VLAN.
Move the interfaces to be included in the 802.3ad aggregate or
Redundant interface from the Available interfaces list to the Selected
interfaces list.
This field is only displayed when Type is set to either 802.3ad aggregate
or Redundant interface.
Enter the VLAN ID that matches the VLAN ID of the packets to be
received by this VLAN subinterface. You cannot change the VLAN ID of
an existing VLAN subinterface.
The VLAN ID can be any number between 1 and 4096 and must match
the VLAN ID added by the IEEE 802.1Q-compliant router or switch
connected to the VLAN subinterface. See “VLAN overview” on
page 107.
This field is only displayed when Type is set to VLAN.
Select the virtual domain to which this VLAN subinterface belongs.
This is available to the super admin account when virtual domain
configuration is enabled. See “Using virtual domains” on page 71.
To configure a static IP address for the interface, select Manual.
You can also configure the interface for dynamic IP address assignment.
See “Configuring DHCP on an interface” on page 88 or “Configuring an
interface for PPPoE or PPPoA” on page 90.
Enter the IP address/subnet mask in the IP/Netmask field. The IP
address must be on the same subnet as the network to which the
interface connects.
Two interfaces cannot have IP addresses on the same subnet.
This field is only available when Manual addressing mode is selected.
Select DDNS to configure a Dynamic DNS service for this interface.
Additional fields are displayed. See “Configuring Dynamic DNS service
for an interface” on page 91.
To enable dead gateway detection, enter the IP address of the next hop
router on the network connected to the interface and select Enable. See
“Dead gateway detection” on page 100.
FortiGate Version 3.0 MR5 Administration Guide
84 01-30005-0203-20070830