Using data interfaces for management traffic
The FortiGate-6000 supports basic management communication through the FortiGate-6000 data interfaces (port1 to port28). To enable management connections to these interfaces, configure the VDOM that the data interfaces are included in to allow traffic forwarding to the management board.
For example, to allow management communication for interfaces in the root VDOM, edit the root VDOM from the CLI and use the following command:
config vdom
edit root
config system settings
set motherboard-traffic-forwarding icmp admin
end
The icmp option, enabled by default, allows you to log into the management board from one of the MGMT interfaces and use the execute ping command to ping an address through one of the data interfaces. The interface used depends on the routing configuration.
The admin option allows Telnet, SSH, HTTP, and HTTPS management connections a data interface in the VDOM. You cannot configure data interfaces to accept management connections using non-standard ports.
You can enable both icmp and admin traffic forwarding or just one or the other.
|
Currently, the admin option is in development and not recommended. |