The following examples show how to configure per-VDOM settings, such as operation mode, routing, and security policies, in a network that includes the following VDOMs:
- VDOM-A: allows the internal network to access the Internet.
- VDOM-B: allows external connections to an FTP server.
- root: the management VDOM.
You can use VDOMs in either NAT or transparent mode on the same FortiGate. By default, VDOMs operate in NAT mode.
For both examples, multi VDOM mode must be enabled, and VDOM-A and VDOM-B must be created.
Multi VDOM mode can be enabled in the GUI or CLI. Enabling it does not require a reboot, but does log you out of the device. The current configuration is assigned to the root VDOM.
On FortiGate 60 series models and lower, VDOMs can only be enabled using the CLI.
- On the FortiGate, go to System > Settings.
- In the System Operation Settings section, enable Virtual Domains.
- Select Multi VDOM for the VDOM mode.
- Click OK.
config system global
set vdom-mode multi-vdom
- In the Global VDOM, go to System > VDOM, and click Create New. The New Virtual Domain page opens.
- In the Virtual Domain field, enter VDOM-A.
- If required, set the NGFW Mode. If the NGFW Mode is Policy-based, select an SSL/SSH Inspection from the list.
- Optionally, enter a comment.
- Click OK to create the VDOM.
- Repeat the above steps for VDOM-B.