FortiGate Administration Guide - FirewallShop.com

System Network
Interface
Name
Virtual Domain
IP
Remote IP
Administrative
Access
HTTPS
PING
HTTP
SSH
SNMP
TELNET
Description
The name of the IPSec interface.
Select the VDOM of the IPSec interface.
If you want to use dynamic routing with the tunnel or be able to ping
the tunnel interface, enter IP addresses for the local and remote
ends of the tunnel. These two addresses must not be used
anywhere else in the network.
Select the types of administrative access permitted on this
interface.
Allow secure HTTPS connections to the web-based manager
through this interface.
Interface responds to pings. Use this setting to verify your
installation and for testing.
Allow HTTP connections to the web-based manager through this
interface. HTTP connections are not secure and can be intercepted
by a third party.
Allow SSH connections to the CLI through this interface.
Allow a remote SNMP manager to request SNMP information by
connecting to this interface. See “Configuring SNMP” on page 143.
Allow Telnet connections to the CLI through this interface. Telnet
connections are not secure and can be intercepted by a third party.
Optionally, enter a description up to 63 characters long.
Interfaces only configurable with CLI commands
While nearly all types of interfaces can be configured from the GUI interface, a
few, such as the loopback and inter-vdom virtual interface types, can only be
configured using CLI commands.
Virtual interfaces are not connected to any physical devices or cables outside the
FortiGate unit. They allow additional connections inside the FortiGate unit, which
allow for more complex configurations. Virtual interfaces also have the added
benefit of speed - depending on CPU load they are considerably faster than
physical interfaces. VLANs, loopback interfaces, and inter-vdom interfaces are all
virtual interfaces.
Loopback interface
The loopback interface is a virtual interface. It was added to assist with blackhole
routing where network traffic is just dropped. For more information on blackhole
routing, see “Blackhole Routing” on page 234.
A loopback interface is not connected to hardware, so it does not have hardware
connection issues. As long as the FortiGate unit is functioning the loopback
interface is active. This ‘always up’ feature is useful in a number of situations,
such as dynamic routing.
The CLI command to configure a loopback interface called loop1 with an IP
address of 10.0.0.10 is:
config system interface
edit loop1
set type loopback
set ip 10.0.0.10 255.255.255.0
end
For more information, see config system interface in the FortiGate CLI Reference.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 93