Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

FortiGate-6000 Handbook

Using data interfaces for management traffic

The FortiGate-6000 supports basic management communication through the FortiGate-6000 data interfaces (port1 to port28). To enable management connections to these interfaces, configure the VDOM that the data interfaces are included in to allow traffic forwarding to the management board.

For example, to allow management communication for interfaces in the root VDOM, edit the root VDOM from the CLI and use the following command:

config vdom

edit root

config system settings

set motherboard-traffic-forwarding icmp admin

end

The icmp option, enabled by default, allows you to log into the management board from one of the MGMT interfaces and use the execute ping command to ping an address through one of the data interfaces. The interface used depends on the routing configuration.

The admin option allows Telnet, SSH, HTTP, and HTTPS management connections a data interface in the VDOM. You cannot configure data interfaces to accept management connections using non-standard ports.

You can enable both icmp and admin traffic forwarding or just one or the other.

note icon Currently, the admin option is in development and not recommended.

Using data interfaces for management traffic

The FortiGate-6000 supports basic management communication through the FortiGate-6000 data interfaces (port1 to port28). To enable management connections to these interfaces, configure the VDOM that the data interfaces are included in to allow traffic forwarding to the management board.

For example, to allow management communication for interfaces in the root VDOM, edit the root VDOM from the CLI and use the following command:

config vdom

edit root

config system settings

set motherboard-traffic-forwarding icmp admin

end

The icmp option, enabled by default, allows you to log into the management board from one of the MGMT interfaces and use the execute ping command to ping an address through one of the data interfaces. The interface used depends on the routing configuration.

The admin option allows Telnet, SSH, HTTP, and HTTPS management connections a data interface in the VDOM. You cannot configure data interfaces to accept management connections using non-standard ports.

You can enable both icmp and admin traffic forwarding or just one or the other.

note icon Currently, the admin option is in development and not recommended.