Fortinet Version 3.0 Uživatelský manuál Strana 1

www.fortinet.comFortiBridgeVersion 3.0Administration Guide

FortiBridge Version 3.0 Administration Guide10 09-30000-0163-20061109Example FortiBridge application FortiBridge operating principlesThe FortiGate uni

FortiBridge operating principles Normal mode operationFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 111 Connect the FortiBridge-

FortiBridge Version 3.0 Administration Guide12 09-30000-0163-20061109Normal mode operation FortiBridge operating principlesFigure 5: FortiBridge unit

FortiBridge operating principles Normal mode operationFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 13Enabling probes to detect

FortiBridge Version 3.0 Administration Guide14 09-30000-0163-20061109Bypass mode operation FortiBridge operating principlesBypass mode operationWhen t

FortiBridge operating principles Example FortiGate HA cluster FortiBridge applicationFortiBridge Version 3.0 Administration Guide09-30000-0163-200611

FortiBridge Version 3.0 Administration Guide16 09-30000-0163-20061109Example configuration with other FortiGate interfaces FortiBridge operating princ

FortiBridge operating principles Example configuration with other FortiGate interfacesFortiBridge Version 3.0 Administration Guide09-30000-0163-20061

FortiBridge Version 3.0 Administration Guide18 09-30000-0163-20061109Example configuration with other FortiGate interfaces FortiBridge operating princ

Setting up FortiBridge units FortiBridge unit basic informationFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 19Setting up FortiB

FortiBridge Administration GuideVersion 3.09 November 200609-30000-0163-20061109© Copyright 2006 Fortinet, Inc. All rights reserved. No part of this p

FortiBridge Version 3.0 Administration Guide20 09-30000-0163-20061109FortiBridge unit basic information Setting up FortiBridge unitsFigure 9: FortiBri

Setting up FortiBridge units FortiBridge unit basic informationFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 21Technical specifi

FortiBridge Version 3.0 Administration Guide22 09-30000-0163-20061109FortiBridge unit basic information Setting up FortiBridge unitsConnectorsFactory

Setting up FortiBridge units Connecting and turning on the FortiBridge unitFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 23Conne

FortiBridge Version 3.0 Administration Guide24 09-30000-0163-20061109Connecting and turning on the FortiBridge unit Setting up FortiBridge unitsTo con

Setting up FortiBridge units Connecting to the command line interface (CLI)FortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 253 Con

FortiBridge Version 3.0 Administration Guide26 09-30000-0163-20061109Completing the basic FortiBridge configuration Setting up FortiBridge units9 Type

Setting up FortiBridge units Completing the basic FortiBridge configurationFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 27• Add

FortiBridge Version 3.0 Administration Guide28 09-30000-0163-20061109Completing the basic FortiBridge configuration Setting up FortiBridge unitsChangi

Setting up FortiBridge units Completing the basic FortiBridge configurationFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 29Allow

Contents FortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 3ContentsIntroduction...

FortiBridge Version 3.0 Administration Guide30 09-30000-0163-20061109Resetting to the factory default configuration Setting up FortiBridge unitsconfig

Setting up FortiBridge units Installing FortiBridge unit firmwareFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 31Upgrading to a

FortiBridge Version 3.0 Administration Guide32 09-30000-0163-20061109Installing FortiBridge unit firmware Setting up FortiBridge unitsReverting to a p

Setting up FortiBridge units Installing FortiBridge unit firmwareFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 33Installing firm

FortiBridge Version 3.0 Administration Guide34 09-30000-0163-20061109Installing FortiBridge unit firmware Setting up FortiBridge unitsThe following me

Configuration and operating procedures Example network settingsFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 35Configuration and

FortiBridge Version 3.0 Administration Guide36 09-30000-0163-20061109Configuring FortiBridge probes Configuration and operating proceduresFigure 13: E

Configuration and operating procedures Configuring FortiBridge probesFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 37This section

FortiBridge Version 3.0 Administration Guide38 09-30000-0163-20061109Configuring FortiBridge probes Configuration and operating procedures2 Configure

Configuration and operating procedures Configuring FortiBridge probesFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 393 Display pi

FortiBridge Version 3.0 Administration Guide4 09-30000-0163-20061109ContentsCompleting the basic FortiBridge configuration...

FortiBridge Version 3.0 Administration Guide40 09-30000-0163-20061109Configuring FortiBridge alerts Configuration and operating proceduresFigure 15: F

Configuration and operating procedures Configuring FortiBridge alertsFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 41FortiBridge

FortiBridge Version 3.0 Administration Guide42 09-30000-0163-20061109Configuring FortiBridge alerts Configuration and operating procedures02-01-2005 8

Configuration and operating procedures Recovering from a FortiGate failureFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 43To add

FortiBridge Version 3.0 Administration Guide44 09-30000-0163-20061109Manually switching between FortiBridge operating modes Configuration and operatin

Configuration and operating procedures Backing up and restoring the FortiBridge configurationFortiBridge Version 3.0 Administration Guide09-30000-016

FortiBridge Version 3.0 Administration Guide46 09-30000-0163-20061109Backing up and restoring the FortiBridge configuration Configuration and operatin

Using the CLI CLI basicsFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 47Using the CLIThis chapter explains how to connect to the

FortiBridge Version 3.0 Administration Guide48 09-30000-0163-20061109Connecting to the FortiBridge CLI using SSH or Telnet Using the CLIFor example, t

Using the CLI Connecting to the FortiBridge CLI using SSH or TelnetFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 49To connect to

Contents FortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 5system console...

FortiBridge Version 3.0 Administration Guide50 09-30000-0163-20061109Connecting to the FortiBridge CLI using SSH or Telnet Using the CLI

config CLI commands FortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 51config CLI commandsalertemail settinglog syslogd settingprobe

FortiBridge Version 3.0 Administration Guide52 09-30000-0163-20061109alertemail setting config CLI commandsalertemail settingUse this command to confi

config CLI commands alertemail settingFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 53Related Commands• probe setting

FortiBridge Version 3.0 Administration Guide54 09-30000-0163-20061109log syslogd setting config CLI commandslog syslogd settingUse this command to con

config CLI commands probe probe_list {ping | http | ftp | pop3 | smtp | imap}FortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 55pro

FortiBridge Version 3.0 Administration Guide56 09-30000-0163-20061109probe setting config CLI commandsprobe settingUse this command to configure how t

config CLI commands system accprofileFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 57system accprofileUse this command to add ac

FortiBridge Version 3.0 Administration Guide58 09-30000-0163-20061109system accprofile config CLI commandsExampleUse the following commands to add a n

config CLI commands system adminFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 59system adminUse this command to add, edit, and d

FortiBridge Version 3.0 Administration Guide6 09-30000-0163-20061109Contents

FortiBridge Version 3.0 Administration Guide60 09-30000-0163-20061109system admin config CLI commandsExampleUse the following commands to add a new ad

config CLI commands system consoleFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 61system consoleUse this command to set the cons

FortiBridge Version 3.0 Administration Guide62 09-30000-0163-20061109system dns config CLI commandssystem dnsUse this command to set the DNS server ad

config CLI commands get system statusFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 63get system statusUse this command to displa

FortiBridge Version 3.0 Administration Guide64 09-30000-0163-20061109system fail_close config CLI commandssystem fail_closeUse this command to configu

config CLI commands system fail_closeFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 65ExampleThis example shows how to enable the

FortiBridge Version 3.0 Administration Guide66 09-30000-0163-20061109system global config CLI commandssystem globalUse this command to configure globa

config CLI commands system globalFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 67ExampleThis example shows how to set the FortiB

FortiBridge Version 3.0 Administration Guide68 09-30000-0163-20061109system interface {internal | external} config CLI commandssystem interface {inter

config CLI commands system manageipFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 69system manageipConfigure the FortiBridge mana

Introduction About FortiBridgeFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 7IntroductionThis chapter introduces you to the Fort

FortiBridge Version 3.0 Administration Guide70 09-30000-0163-20061109system route config CLI commandssystem routeUse this command to add or edit Forti

config CLI commands system snmp communityFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 71system snmp communityUse this command t

FortiBridge Version 3.0 Administration Guide72 09-30000-0163-20061109system snmp community config CLI commandsCommand syntax patternconfig hostsedit &

execute CLI commands FortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 73execute CLI commandsbackupdatefactoryresetpingrebootrestores

FortiBridge Version 3.0 Administration Guide74 09-30000-0163-20061109backup execute CLI commandsbackupBackup the FortiBridge configuration to a file o

execute CLI commands dateFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 75dateGet or set the system date.Command syntaxexecute da

FortiBridge Version 3.0 Administration Guide76 09-30000-0163-20061109factoryreset execute CLI commandsfactoryresetReset the FortiBridge configuration

execute CLI commands pingFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 77pingSend five ICMP echo requests (pings) to test the ne

FortiBridge Version 3.0 Administration Guide78 09-30000-0163-20061109reboot execute CLI commandsrebootRestart the FortiBridge unit.Command syntaxexecu

execute CLI commands restoreFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 79restoreUse this command to restore a backup configur

FortiBridge Version 3.0 Administration Guide8 09-30000-0163-20061109Fortinet documentation Introduction• Using the CLI describes how to use the FortiB

FortiBridge Version 3.0 Administration Guide80 09-30000-0163-20061109switch-mode execute CLI commandsswitch-modeUse this command to switch between byp

execute CLI commands timeFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 81timeGet or set the system time.Command syntaxexecute ti

FortiBridge Version 3.0 Administration Guide82 09-30000-0163-20061109time execute CLI commands

Index FortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 83IndexAaccprofile 59action on failurefail open 37probe 37send alertmail 37SN

FortiBridge Version 3.0 Administration Guide84 09-30000-0163-20061109IndexHA cluster 15other FortiGate interfaces 16executeCLI commands 73switch-mode

Index FortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 85monitorFortiGate unit 11mounting instructions 20Nname 71new versionFortiBri

FortiBridge Version 3.0 Administration Guide86 09-30000-0163-20061109Indexv2c 42snmpaction_on_failure 56SSHaccess to CLI 47standalone FortiGate unit 9

www.fortinet.com

www.fortinet.com

FortiBridge operating principles Example FortiBridge applicationFortiBridge Version 3.0 Administration Guide09-30000-0163-20061109 9FortiBridge opera