FortiBridge 4.0 Administration Guide

Getting Started

This section contains information about initial CLI configuration tasks that you complete after you have installed the FortiBridge product.

You can connect to the CLI using an SSH or Telnet connection. For connection instructions, refer to the FortiBridge QuickStart Guide. For more information about the CLI, see the FortiBridge CLI Reference Guide at the following location:

http://docs.fortinet.com/fortibridge/reference

System Settings

The following sections describe initial system settings that you should configure before using the product.

User and Password

By default, the administrator account is configured with the username admin and no password. In order to prevent unauthorized access to the system, it is highly recommended that you change the user name and password.

To update the admin user and password:

FBG-3002L#set_user FBGuser1

FBG-3002L#set_psw

The set_psw command will prompt you to enter and confirm the new password. You must log out and then log in again to access the new user account.

Web User

By default, the web account is configured with the username admin and no password. In order to prevent unauthorized access to the system, it is highly recommended that you change the user name and password.

To update the web user and password:

FBG-3002L#set_web_user FBGuser2

FBG-3002L#set_web_user_psw <old password> <new password>

Time and date

You can either manually set the system date and time or configure the system to use a Network Time Protocol (NTP) server. Network Time Protocol enables you to keep the system time in sync with other systems. This will ensure that logs and other time-sensitive settings on the system are correct.

To set the current date and time, using the set_time command (the field order is month, day, hour, minute, and year):

FBG-3002L#set_time 2 5 13 10 2010

To connect to an NTP server, enable NTP and configure the NTP server address:

FBG-3002L#set_ntp_state on

FBG-3002L#set_ntp_server_ip 192.168.2.100

Administrative port settings

You can change the IP address, mask and default gateway of the management port, using the following commands:

FBG-3002L#set_ip 192.168.2.200 255.255.0.0

FBG-3002L#set_gateway 192.168.2.1

Changing the host name

The host name of your system appears at the CLI prompt and as the SNMP system name.

To change the host name, use the set_unit_name command:

FBG-3002L#set_unit_name FBG-3002S

Configuration Backups

We recommend that you perform a backup of the initial configuration, and after any configuration changes.

If you reset the system to factory defaults or perform a TFTP upload of the firmware, these actions erase the existing configuration.You will need to restore the configuration from a backup.

Store configuration files on the management computer or at an off-site location. You have the option to save the configuration file to a TFTP site.

Backing up the configuration using the web-based manager

  1. Go to System > Status.
  2. On the Configuration widget, click Backup
  3. The web browser will prompt you for a location to save the configuration file. The configuration file will have a .conf extension.

Restoring a configuration

Should you need to restore a configuration file, use the following steps:

  1. Go to System > Status.
  2. On the Configuration pull down selector, select the backup file to be restored.
  3. click Restore.

Restore factory defaults

You may need to reset the system to its original defaults; for example, to begin with a fresh configuration.

You can restore the default values using the CLI by entering the command:

FBG-3002L#set_default

This command does not reset the speed of the RS-232 management port.

Firmware Upgrades

You can upgrade the system to a newer version of firmware.

  1. Copy the new firmware file and the matching ‘update.desc’ file to the /tftpboot directory of the TFTP server.
  2. Enter the following CLI command: update <tftp server IP address>
  3. When the upgrade is complete, enter the following CLI command: reboot

 

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.