This recipe has the following requirements:
-
An ISP that provides connectivity with DHCP and accepts DHCP requests without authentication.
-
A FortiGate with a default configuration that includes a DHCP server on the lan (or internal) interface and a security policy that securely allows all sessions from the Internal network to reach the Internet.
-
Your network uses IPv4 to connect to the FortiGate and Internet.
1. Connecting the FortiGate to your ISP and the internal network
Connect the FortiGate wan interface to your ISP-supplied equipment.
Connect the internal network to the FortiGate’s default lan or internal interface.
Turn on the ISP’s equipment, the FortiGate unit, and the PCs on the internal network.
2. Configuring your PCs to use DHCP
Windows Vista/7/8:
Go to Network and Sharing Center and select Local Area Connections. Select Properties.
Select Internet Protocol Version 4 (TCP/IPv4), then select Properties.
Select Obtain an IP address automatically and Obtain DNS server address automatically.
Mac OS X:
Go to Network Preferences and select Ethernet.
Set Configure IPv4 to Using DHCP.
3. Results
From any PC on the internal network, open a web browser and browse to any website. You can successfully connect to the Internet.
Go to Policy & Objects > IPv4 > Policy. Your Internet-access policy is at the top of list, in the lan – wan section (this section’s name varies based on the FortiGate model).
View the Count column, which displays the total amount of traffic that has used this policy since the FortiGate’s last reboot. The column should display results, showing that the policy is being used for traffic.
If this column is not visible, right-click on the title row, select Count, and select Apply.