Fortinet black logo

Handbook

Configuring central management

Configuring central management

Central Management allows the ADC to be connected to an ADC Manager. Multiple ADC's can be managed by the ADC Manager. If you have large networks with multiple ADC's, with the ADC Manager you can simplify the configuration of these ADC's (for example, setting multiple ADC's to the same configuration), and view all of their logs and statistics together.

The ADC Manager is a powerful tool that gives you more effective control over your ADC's.

This guide will show you how to enable central management on your particular ADC. You will enter the IP address of your manager, then enable Central Management, therefore allowing the ADC Manager to manage your ADC.

See the ADC Manager handbook.

Basic configuration of two ADC's linked to a Manager

Configuring central management

1. Global > System > Central Management

2. Click the edit function at the far right. At first, the IP address should be empty, and the Type should be none.

3. Configure according to the table below.

Central Management settings

Settings Guidelines
Type

The type of the Central Management

None—Initial State of CM Agent.

FortiADC Manager—The ADC is connected to the Manager.

Address

The IP address or hostname of FortiADC-Manager.

Interval

How often the ADC tries to connect to the Manager. Default 10 seconds. Range 10- 120.

Register Enable/disable register to ADC Manager. That is to say, cut off or attach connection to the ADC Manager. Default is disable
Management Status

The connection status of the ADC.

  • Online—ADC Manager successfully connects to CM Server.
  • Offline—ADC Manager failed to connect CM Server. It can happen at the first connection trial or if ADC Manager lost the connection. Note: ADC Manager updates info to CM Server every minute and will make state as Offline when it does not get response 2 times.
  • Reject—Occurs when ADC Manager tries to connect with ‘State is not None’ and CM Server does not have the record of this ADC(identify by license). The connection will be rejected by CM Server.

Note: When register is enabled, modifying other central management settings is forbidden. Other central management settings are grayed out. Furthermore, a warning message is shown when on login.

When ADC is set to ‘Read Only mode’, it means all configurations can only be viewed, although the admin access profile has Read-Write permission.

When trying to write configurations in Read Only, the error message is shown:

The CM Agent state change log can be found in System Logs.

Configuring central management

Central Management allows the ADC to be connected to an ADC Manager. Multiple ADC's can be managed by the ADC Manager. If you have large networks with multiple ADC's, with the ADC Manager you can simplify the configuration of these ADC's (for example, setting multiple ADC's to the same configuration), and view all of their logs and statistics together.

The ADC Manager is a powerful tool that gives you more effective control over your ADC's.

This guide will show you how to enable central management on your particular ADC. You will enter the IP address of your manager, then enable Central Management, therefore allowing the ADC Manager to manage your ADC.

See the ADC Manager handbook.

Basic configuration of two ADC's linked to a Manager

Configuring central management

1. Global > System > Central Management

2. Click the edit function at the far right. At first, the IP address should be empty, and the Type should be none.

3. Configure according to the table below.

Central Management settings

Settings Guidelines
Type

The type of the Central Management

None—Initial State of CM Agent.

FortiADC Manager—The ADC is connected to the Manager.

Address

The IP address or hostname of FortiADC-Manager.

Interval

How often the ADC tries to connect to the Manager. Default 10 seconds. Range 10- 120.

Register Enable/disable register to ADC Manager. That is to say, cut off or attach connection to the ADC Manager. Default is disable
Management Status

The connection status of the ADC.

  • Online—ADC Manager successfully connects to CM Server.
  • Offline—ADC Manager failed to connect CM Server. It can happen at the first connection trial or if ADC Manager lost the connection. Note: ADC Manager updates info to CM Server every minute and will make state as Offline when it does not get response 2 times.
  • Reject—Occurs when ADC Manager tries to connect with ‘State is not None’ and CM Server does not have the record of this ADC(identify by license). The connection will be rejected by CM Server.

Note: When register is enabled, modifying other central management settings is forbidden. Other central management settings are grayed out. Furthermore, a warning message is shown when on login.

When ADC is set to ‘Read Only mode’, it means all configurations can only be viewed, although the admin access profile has Read-Write permission.

When trying to write configurations in Read Only, the error message is shown:

The CM Agent state change log can be found in System Logs.