Chapter 2 Advanced Routing for FortiOS 5.0 : Routing Information Protocol (RIP) : Simple RIP example : Configuring the FortiGate units system information : Configure the hostname, interfaces, and default route
  
Configure the hostname, interfaces, and default route
To configure Router1 system information - web-based manager
1. Go to System > Dashboard > Status > System Information.
2. Next to Host Name select Change, and enter “Router1”.
3. Go to Router > Static > Static Routes.
4. Edit the default route and enter the following information:
Destination IP/Mask
0.0.0.0/0.0.0.0
Device
port2 (router2)
Gateway
172.20.120.5/255.255.255.0
Distance
40
5. Enter a second default route and enter the following information:
Destination IP/Mask
0.0.0.0/0.0.0.0
Device
port3 (router3)
Gateway
172.20.120.5/255.255.255.0
Distance
40
6. Go to System > Network > Interfaces.
7. Edit port1 (internal) interface.
8. Set the following information, and select OK.
Alias
internal
IP/Netmask
10.11.101.101/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Internal sales network
Administrative Status
Up
9. Edit port2 (router2) interface.
10. Set the following information, and select OK.
Alias
router2
IP/Netmask
10.11.201.101/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Link to R&D network & internet through Router2
Administrative Status
Up
11. Edit port3 (router3) interface.
12. Set the following information, and select OK.
Alias
router3
IP/Netmask
10.11.202.101/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Link to R&D network and internet through Router3
Administrative Status
Up
To configure Router1 system information - CLI
config system global
set hostname Router1
end
 
config router static
edit 1
set device "port2"
set distance 45
set gateway 10.11.201.102
next
edit 2
set device “port3”
set distance 45
set gateway 10.11.202.103
end
end
 
config system interface
edit port1
set alias internal
set ip 10.11.101.101/255.255.255.0
set allowaccess https ssh ping
set description “Internal sales network”
next
edit port2
set alias ISP
set allowaccess https ssh ping
set ip 10.11.201.101/255.255.255.0
set description “Link to R&D network & internet through Router2”
next
edit port3
set alias router3
set ip 10.11.202.101/255.255.255.0
set allowaccess https ssh ping
set description “Link to R&D network & internet through Router2”
end
end
 
To configure Router2 system information - web-based manager
1. Go to System > Dashboard > Status > System Information.
2. Next to Host Name select Change, and enter “Router2”.
3. Go to Router > Static > Static Routes.
4. Edit the default route and enter the following information:
Destination IP/Mask
0.0.0.0/0.0.0.0
Device
port4 (ISP)
Gateway
172.20.120.5/255.255.255.0
Distance
5
5. Go to System > Network > Interfaces.
6. Edit port1 (internal) interface.
7. Set the following information, and select OK.
Alias
internal
IP/Netmask
10.12.101.102/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
R&D internal network and Router3
Administrative Status
Up
8. Edit port2 (router1) interface.
9. Set the following information, and select OK.
Alias
router1
IP/Netmask
10.12.201.102/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Link to Router1 and the Sales network
Administrative Status
Up
10. Edit port3 (router4) interface.
11. Set the following information, and select OK.
Alias
router4
IP/Netmask
10.12.301.102/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Link to Router4 and the accounting network
Administrative Status
Up
12. Edit port4 (ISP) interface.
13. Set the following information, and select OK.
Alias
ISP
IP/Netmask
172.20.120.102/255.255.255.0
Administrative Access
HTTPS SSH PING
Detect Interface Status for Gateway Load Balancing
enable
Detect Server
172.20.120.5
Detect Protocol
Ping
Detect Interface Status for Gateway Load Balancing
enable
Description
Internet through ISP
Administrative Status
Up
To configure Router2 system information - CLI
config system global
set hostname Router2
end
config router static
edit 1
set device "port4"
set distance 5
set gateway 172.20.130.5
end
end
config system interface
edit port1
set alias internal
set ip 10.11.101.102/255.255.255.0
set allowaccess https ssh ping
set description “Internal RnD network and Router3”
next
edit port2
set alias router1
set allowaccess https ssh ping
set ip 10.11.201.102/255.255.255.0
set description “Link to Router1”
next
edit port3
set alias router3
set ip 10.14.202.102/255.255.255.0
set allowaccess https ssh ping
set description “Link to Router4”
next
edit port4
set alias ISP
set ip 172.20.120.102/255.255.255.0
set allowaccess https ssh ping
set description “ISP and internet”
end
end
To configure Router3 system information - web-based manager
1. Go to System > Dashboard > Status > System Information.
2. Next to Host Name select Change, and enter “Router3”.
3. Go to Router > Static > Static Route.
4. Edit the default route and enter the following information:
Destination IP/Mask
0.0.0.0/0.0.0.0
Device
port4 (ISP)
Gateway
172.20.120.5/255.255.255.0
Distance
5
5. Go to System > Network > Interfaces.
6. Edit port1 (internal) interface.
7. Set the following information, and select OK.
Alias
internal
IP/Netmask
10.12.101.103/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
R&D internal network and Router2
Administrative Status
Up
8. Edit port2 (router1) interface.
9. Set the following information, and select OK.
Alias
router1
IP/Netmask
10.13.201.103/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Link to Router1 and Sales network
Administrative Status
Up
10. Edit port3 (router4) interface.
11. Set the following information, and select OK.
Alias
router4
IP/Netmask
10.13.301.103/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Link to Router4 and accounting network
Administrative Status
Up
12. Edit port4 (ISP) interface.
13. Set the following information, and select OK.
Alias
ISP
IP/Netmask
172.20.120.103/255.255.255.0
Administrative Access
HTTPS SSH PING
Detect Interface Status for Gateway Load Balancing
enable
Detect Server
172.20.120.5
Detect Protocol
Ping
Description
Internet and ISP
Administrative Status
Up
To configure Router3 system information - CLI
config system global
set hostname Router3
end
 
config router static
edit 1
set device "port4"
set distance 5
set gateway 172.20.130.5
end
end
 
config system interface
edit port1
set alias internal
set ip 10.12.101.103/255.255.255.0
set allowaccess https ssh ping
set description “Internal RnD network and Router2”
next
edit port2
set alias ISP
set allowaccess https ssh ping
set ip 10.11.201.103/255.255.255.0
set description “Link to Router1”
next
edit port3
set alias router3
set ip 10.14.202.103/255.255.255.0
set allowaccess https ssh ping
set description “Link to Router4”
next
edit port4
set alias ISP
set ip 172.20.120.103/255.255.255.0
set allowaccess https ssh ping
set description “ISP and internet”
end
end
To configure Router4 system information - web-based manager
1. Go to System > Dashboard > Status > System Information.
2. Next to Host Name select Change, and enter “Router4”.
3. Go to Router > Static > Static Routes.
4. Edit the default route and enter the following information:
Destination IP/Mask
0.0.0.0/0.0.0.0
Device
port2 (router2)
Gateway
172.20.120.5/255.255.255.0
Distance
40
5. Enter a second default route and enter the following information:
Destination IP/Mask
0.0.0.0/0.0.0.0
Device
port3 (router3)
Gateway
172.20.120.5/255.255.255.0
Distance
40
6. Go to System > Network > Interfaces.
7. Edit port 1 (internal) interface.
8. Set the following information, and select OK.
Alias
internal
IP/Netmask
10.14.101.104/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Internal accounting network
Administrative Status
Up
9. Edit port 2 (router2) interface.
10. Set the following information, and select OK.
Alias
router2
IP/Netmask
10.14.201.104/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Link to R&D network & internet through Router2
Administrative Status
Up
11. Edit port 3 (router3) interface.
12. Set the following information, and select OK.
Alias
router3
IP/Netmask
10.14.301.104/255.255.255.0
Administrative Access
HTTPS SSH PING
Description
Link to R&D network and internet through Router3
Administrative Status
Up
To configure Router4 system information - CLI
config system global
set hostname Router4
end
 
config router static
edit 1
set device "port2"
set distance 45
set gateway 10.14.201.102
next
edit 2
set device “port3”
set distance 45
set gateway 10.14.202.103
end
end
 
config system interface
edit port1
set alias internal
set ip 10.14.101.104/255.255.255.0
set allowaccess https ssh ping
set description “Internal sales network”
next
edit port2
set alias router2
set allowaccess https ssh ping
set ip 10.14.201.104/255.255.255.0
set description “Link to R&D network & internet through Router2”
next
edit port3
set alias router3
set ip 10.14.202.104/255.255.255.0
set allowaccess https ssh ping
set description “Link to R&D network & internet through Router2”
end
end