System Settings

Network

The FortiAnalyzer unit can manage Fortinet devices connected to any of its interfaces. The DNS servers must be on the networks to which the FortiAnalyzer unit connects, and should have two different addresses.

To view the configured network interfaces, go to System Settings > Network. The network screen is displayed.

Figure 46:Network page

Configure the following settings:

Management Interface

IP/Netmask The IP address and netmask associated with this interface.
IPv6 Address The IPv6 address and netmask associated with this interface.
Administrative

Access

Select the allowed administrative service protocols from: HTTPS,

HTTP, PING, SSH, TELNET, SNMP, Web Service, and Aggregator.

IPv6 Administrative

Access

Select the allowed IPv6 administrative service protocols from: HTTPS, HTTP, PING, SSH, TELNET, SNMP, Web Service, and Aggregator.
Default Gateway The default gateway associated with this interface
DNS  

Primary DNS Server Enter the primary DNS server IP address.

Secondary DNS

Server

Enter the secondary DNS server IP address.
All Interfaces Click to open the network interface list. See “Network interfaces” on page 70.
Routing Table Click to open the routing table. See “Static routes” on page 72.
IPv6 Routing Table Click to open the IPv6 routing table. See “Static routes” on page 72.
Diagnostic Tools Select to run available diagnostic tools, including Ping, Traceroute, and View logs. See “Diagnostic tools” on page 73.

Network interfaces

To view the Network interface list, select the All Interfaces button.

Figure 47:Network interface list

The following information is displayed:

Name The names of the physical interfaces on your FortiAnalyzer unit. The name of a physical interface depends on the model. Unlike FortiGate, you cannot set alias names for the interfaces. For more information, on configuring the interface, see “To edit a network interface:” on page 71.

If HA operation is enabled, the HA interface has /HA appended to its name.

IP / Netmask The IP address and netmask associated with this interface.
IPv6 Address The IPv6 address associated with this interface.
Description A description of the interface.
Administrative

Access

The list of allowed administrative service protocols on this interface.

IPv6 Administrative The list of allowed IPv6 administrative service protocols on this access interface.

The following options are available:

Edit Right-click on an interface and select Edit in the in the pop-up menu. Alternatively, double-click the entry to open the Edit Interface page. See “To edit a network interface:” on page 71.
 Delete Right-click on an interface and select Delete in the pop-up menu to remove the entry. Select OK in the confirmation dialog box to complete the delete action.

To edit a network interface:

Either right-click on an interface and select Edit in the in the pop-up menu, or double-click the entry to open the Edit Interface page. The Edit Interface window opens.

Figure 48:Configure network interfaces

Configure the following settings, then select OK to apply your changes:

Enable Select to enable this interface. An enabled icon, , appears in the interface list to indicate the interface is accepting network traffic.

When not selected, a disabled icon,       , appears in the interface list to indicate the interface is down and not accepting network traffic.

Alias Enter an alias for the port to make it easily recognizable.
IP Address/Netmask Enter the IP address and netmask for the interface.
IPv6 Address Enter the IPv6 address for the interface.
Administrative

Access

Select the services to allow on this interface. Any interface that is used to provide administration access to the FortiAnalyzer unit will require at least HTTPS or HTTP for Web-based Manager access, or SSH for CLI access.
IPv6 Administrative

Access

Select the services to allow on this interface. Any interface that is used to provide administration access to the FortiAnalyzer unit will require at least HTTPS or HTTP for Web-based Manager access, or SSH for CLI access.
Description Enter a brief description of the interface (optional).

Static routes

From System Settings > Network, select Routing Table to manage IPv4 static routes, or select IPv6 Routing Table to manage IPv6 static routes.

Figure 49:Routing table

The following information is displayed:

ID The route number.
IP/Netmask The destination IPv4 or IPv6 address and netmask for this route.
Gateway The address of the next hop router to which this route directs traffic.
Interface The network interface that connects to the gateway.

The following options are available:

 Create New Select Create New to add a new route. See “To add a static route:” on page 72.
 Delete Select the check box next to the route number then select Delete to remove the route from the table. Delete is also available in the right-click menu.
 View Select from the right-click menu to open the Create Route window.

To add a static route:

From the routing table, select Create New, double-click on a current route, or right-click and select View, to open the Create Route or Create IPv6 Route window.

Figure 50:Create new route

Configure the following settings, then select OK to create the new static route:

Destination IP/Mask       Enter the destination IP address and netmask, or IPv6 prefix, for this route.

Gateway Enter the address of the next hop router to which this route directs traffic.
Interface Select the network interface that connects to the gateway.

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.