【FortiGate】トランスペアレントモードについての基礎知識【L2 機器として使用】

config system settings
    set opmode transparent
    set manageip <IP_address subnet>
    set gateway <gateway_address> 
end

config system settings
    set opmode transparent
    set manageip 10.10.10.1/24
    set gateway 10.10.10.254
end

FortiGate-60E # config system settings
FortiGate-60E (settings) #     set opmode transparent
FortiGate-60E (settings) #     set manageip 10.10.10.1/24
FortiGate-60E (settings) #     set gateway 10.10.10.254
FortiGate-60E (settings) # end
Cannot change to Transparent mode because this vdom contains managed switches and switchctl-vlans.
Please clear managed-switches, disable fortilink and retry.
node_check_object fail! for opmode transparent
Attribute 'opmode' value 'transparent' checking fail -7610
Command fail. Return code -7610

FortiGate-60E # config system settings
FortiGate-60E (settings) #     set opmode transparent
FortiGate-60E (settings) #     set manageip 10.10.10.1/24
FortiGate-60E (settings) #     set gateway 10.10.10.254
FortiGate-60E (settings) # end
Changing to TP mode
FortiGate-60E #

FortiGate-60E # get system status
Version: FortiGate-60E v7.0.5,build0304,220208 (GA)
...
Operation Mode: Transparent
...

FortiGate-60E # show router static
config router static
    edit 1
        set gateway 10.10.10.254
        set priority 0
    next
end

config system settings
    set opmode nat
    set ip <IP_address subnet>
    set device <interface>
    set gateway <gateway_address> 
end

config system settings
    set opmode nat
    set ip 10.1.10.1/24
    set device internal
    set gateway 10.1.10.254
end

FortiGate-60E # config system settings
FortiGate-60E (settings) #     set opmode nat
FortiGate-60E (settings) #     set ip 10.1.10.1/24
FortiGate-60E (settings) #     set device internal
FortiGate-60E (settings) #     set gateway 10.1.10.254
FortiGate-60E (settings) # end
Changing to NAT mode
FortiGate-60E #

FortiGate-60E (internal) # show
config system interface
    edit "internal"
        ...
        set ip 10.1.10.1 255.255.255.0
        ...
    next
end

FortiGate-60E # show router static
config router static
    edit 1
        set gateway 10.1.10.254
        set priority 0
        set device "internal"
    next
end

FW01 # diag netlink brctl name host root.b
show bridge control interface root.b host.
fdb: hash size=2048, used=13, num=15, depth=3, gc_time=4, ageing_time=3
Bridge root.b host table
port no device  devname mac addr                ttl     attributes
...
  5     9       internal2       70:85:c2:02:64:6d       0        Hit(0)
  4     8       internal1       70:85:c2:02:64:6d       15       Hit(15)
...

config system interface
    edit "wan2"
        set forward-domain 10
    next
end

forward-domain    Enter an integer value from <0> to <2147483647>.