Example configurations

Once you have created a new VDOM, you configure individually to suit your network requirements using the per-VDOM settings, such as operation mode, routing, and security policies. The following examples show how to configure these settings in a network that includes the following VDOMs:

• VDOM-A allows the internal network to access the Internet
• VDOM-B allows external connections to an FTP server
• root is the management VDOM

You can use VDOMs in either NAT mode or transparent mode on the same FortiGate. By default, VDOMs operate in NAT mode. In Example 1: NAT mode, both VDOM-A and VDOM-B use NAT mode. In Example 2: NAT and transparent mode, VDOM-A users NAT mode and VDOM-B uses transparent mode.

The examples also include a VDOM link allowing users on the internal network to access the FTP server.

For an additional example of how to configure a VDOMs in NAT mode, in which two different companies connect to different ISPs using a single FortiGate, see the Cookbook recipe VDOM configuration.