Switch to INterface Mode and Internet Access

ORIGINAL: 1. I am trying to switch to the Interface Mode that will allow me to assign individual subnets to each port. I have reset the 60C to all of the defaults but when I try to switch out of the Switch mode I always get an error that says " Entry in Used" . I had read on this forum to delete the DHCP associated with the interface and delete the policy for the interface. When I did this I got a connection error and could not log onto the 60C at all so I had to reset again. What are the steps to setup a default 60C to the interfce mode from the reset system defaults? 2. I am getting very spotty internet access. It seems like only one machine can connect to the internet at one time. I am getting a DHCP from my ISP but no luck getting out on all the machines. It appears that all the machines on the wired side are getting the correct IP addresses but cannot get out. I see the firewall rule set that allows all to go out. Is there an incoming rule that needs to be set?

For question #1 have you tried to delete the addresses for each interfaces can be found under Address?have you tried to delete the static routings under Router?have your tried to delete the policies under FW Policy?if you cleared that portions switch again to interface mode For question # 2 How do you define your policies for internet access?Do you enabled NAT for each policies from Internal-WAN1/2?

I finally got the unit switched to interface mode and have set up each ainterface and added in the DHPC server asociated with each interface. However, I still cannot get out to the internet. For the meantime I added back in my old router and put the 60C behind it. The 60C is connected from the WAN port to a LAN port and it is receiving the WAN information ok. I am confused now as to what needs to be added to the 60C to get out to the internet. I have the default route added that according to the documentation will sent everything out to the gateway. Is there anything else that needs to be added? Thanks, GregH

I think that I addeed in all that you said and I still cannot get the internet. I have attached some screen shot of my settings. I put the 60C behind my current router so that I could play with the settings without toasting the whole network. I cannot break and acquire a new address from my ISP unless I call them. Everyone needs the internet so if I can get out to the internet with this setup I can change as required when I take the other router out. Could not fit all of the screen shots on one gif file so I have to send three more replies with the screen shots. Sorry. GregH

Next Screen Shot

Did not appear to work. What is a DNS of 8.8.8.8?

Found it, Google. This is driving me crazy. I have no sophisticated setup and right now all that I want to do is to access the internet. The WAN1 network is set to DHCP and is getting the correct information and the DNS server addresses. I have the router behind my current router so that I can get it setup because I have to have internet access for the family while I am configuring it. It appears that the router is getting something as my maintenace information is showing up correctly in the status widdow unless this was put into the router when I purchased it. I cannot get out to the internet when I press the LogIn button on the maintenance screen though. I have added my less expensive CheckPoint Z100G router hooked up in the same fashion as the Fortigate, via a switch to the main router, and it works flawlesly without even changing any settings. I can access the internet through wireless or wired. When I connect to the Fortigate via a wired or wireless connection I get the infamous Windows 7 setting of " Unidentified Network" I am getting the correct DHCP address from the Fortinet 60C in either wired or wireless but cannot get out ot the internet. The firewall rules are set for each interface to allow all to go to the WAN1 interface. I do not have any incoming rules set at this point. Any other thoughts? Thanks in advance, Greg H.

Hi, to get you up and running: Using DHCP on the wan1 port should give you - the DNS address - a valid IP - a default route / a gateway If you don' t see a default route pointing to your DHCP server (the other router), in Route>Monitor, then you have to add it manually - this depends on how you set up the DHCP options in the other router: dest=0.0.0.0/0 gateway=192.168.168.168 I can understand that you are a bit frustrated setting the FG up. IMHO you made your life more difficult than necessary: - you have no experience with Fortigates, nor with firewall appliances in general. But you assume they are as easy to setup as a simple DSL router. - you haven' t read the docs. If I had no idea about an appliance I would read at least the introduction and a sample setup. Why do people assume that a high sophisticated security device is best installed with no prior knowledge, and handbooks are for whimps?? I' ll never get that. Get the docs at http://docs.fortinet.com Step-by-step example e.g. in the FortiOS Handbook for 4.00MR2, pp. 289 " Small Office Network Protection" . You can leave out the parts you don' t need. - you setup a major network device while not being able to interrupt live traffic. What you are configuring now will have limited use once you' ve eliminated the old router. So you start over again, at least to a certain part. No you can' t setup a router/firewall without some network downtime. Only magicians can. - you look for help on a Sunday. This is probably the least busy day on the Forums. Nevertheless, with some reading and understanding of the basic concepts you should be able to get your network connected.