12.03.2015 Views

FortiGate Administration Guide - FirewallShop.com

FortiGate Administration Guide - FirewallShop.com

FortiGate Administration Guide - FirewallShop.com

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Interface<br />

System Network<br />

Figure 37: Settings for an ADSL interface<br />

Address mode<br />

Gateway<br />

Connect to Server<br />

IPOA<br />

Creating an 802.3ad aggregate interface<br />

Select the addressing mode that your ISP specifies.<br />

IP over ATM. Enter the IP address and netmask that your<br />

ISP provides.<br />

EOA Ethernet over ATM, also known as Bridged mode. Enter<br />

the IP address and netmask that your ISP provides.<br />

DHCP See “Configuring DHCP on an interface” on page 88.<br />

PPPoE<br />

PPPoA<br />

Virtual Circuit Identification<br />

MUX Type<br />

See “Configuring an interface for PPPoE or PPPoA”<br />

on page 90.<br />

See “Configuring an interface for PPPoE or PPPoA”<br />

on page 90.<br />

Enter the default gateway.<br />

Enable Connect to Server so that the interface<br />

automatically attempts to connect. Disable this option if<br />

you are configuring the interface offline.<br />

Enter the VPI and VCI values your ISP provides.<br />

Select the MUX type: LLC Encap or VC Encap.<br />

Your ISP must provide this information.<br />

You can aggregate (<strong>com</strong>bine) two or more physical interfaces to increase<br />

bandwidth and provide some link redundancy. This has the benefit of higher<br />

bandwidth but has more potential points of failure than redundant interfaces. The<br />

interfaces must connect to the same next-hop routing destination.<br />

<strong>FortiGate</strong> firmware on models 800 and higher implements IEEE standard 802.3ad<br />

for link aggregation.<br />

An interface is available for aggregation only if<br />

• it is a physical interface, not a VLAN interface<br />

• it is not already part of an aggregated or redundant interface<br />

• it is in the same VDOM as the aggregated interface<br />

• it has no defined IP address and is not configured for DHCP or PPPoE<br />

• it has no DHCP server or relay configured on it<br />

• it does not have any VLAN subinterfaces<br />

• it is not referenced in any firewall policy, VIP, IP Pool or multicast policy<br />

• it is not an HA heartbeat interface<br />

it is not one of the <strong>FortiGate</strong> 5000 series backplane interfaces<br />

Note: While you can add accelerated interfaces (FA2 ports) to an aggregate link, you will<br />

lose the acceleration. For example, aggregating two accelerated ports would result in<br />

slower throughput than the two ports separately.<br />

<strong>FortiGate</strong> Version 3.0 MR5 <strong>Administration</strong> <strong>Guide</strong><br />

86 01-30005-0203-20070830

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!