# =====================================================================
# CAU HINH MAU: FortiGate (FortiOS 6.x / 7.x) bang CLI
# WAN nhan IP tu modem (DHCP), LAN 192.168.10.0/24, DHCP server, chinh sach ra internet co NAT
# Nguon: https://thietbimangcu.com/cau-hinh-mau/
# - Ten cong khac nhau theo model: xem bang "show system interface" (vd wan1, lan, internal, port1).
#   Doi "wan1" / "lan" ben duoi cho dung ten tren may cua ban.
# - Dan tung khoi "config ... end" vao CLI Console tren giao dien web hoac qua SSH/console.
# =====================================================================

# --- Cong WAN nhan IP tu modem ---
config system interface
    edit "wan1"
        set mode dhcp
        set allowaccess ping
    next
end

# (WAN la PPPoE thi dung khoi nay thay cho khoi tren)
# config system interface
#     edit "wan1"
#         set mode pppoe
#         set username "TEN_DANG_NHAP_PPPOE"
#         set password "MAT_KHAU_PPPOE"
#         set allowaccess ping
#     next
# end

# --- Cong LAN ---
config system interface
    edit "lan"
        set mode static
        set ip 192.168.10.1 255.255.255.0
        set allowaccess ping https ssh
    next
end

# --- DHCP server cho LAN ---
config system dhcp server
    edit 1
        set interface "lan"
        set default-gateway 192.168.10.1
        set netmask 255.255.255.0
        set dns-service default
        config ip-range
            edit 1
                set start-ip 192.168.10.100
                set end-ip 192.168.10.200
            next
        end
    next
end

# --- Chinh sach: LAN ra internet, bat NAT ---
config firewall policy
    edit 0
        set name "LAN-ra-Internet"
        set srcintf "lan"
        set dstintf "wan1"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
        set nat enable
    next
end

# --- Kiem tra ---
# get system interface physical
# get router info routing-table all
# execute ping 8.8.8.8
# show firewall policy
# execute dhcp lease-list