Fortinet black logo

Administration Guide

Models without a dedicated management port

Copy Link
Copy Doc ID 962fb21b-9bd3-11eb-b70b-00505692583a:95392
Download PDF

Models without a dedicated management port

For FortiSwitch models without a dedicated management port, configure the internal interface as the management port.

NOTE: For FortiSwitch models without a dedicated management port, the internal interface has a default VLAN ID of 1.

Using the GUI:

First start by editing the default internal interface’s configuration.

  1. Go to System > Network > Interface > Physical, select Edit for the internal interface.


  2. In the IP/Netmask field, enter the IP address and netmask.
  3. Select the appropriate protocols to connect to the interface for administrative access.
  4. Optional. Select Add IP to add a secondary IP address for the internal interface.
  5. Select Update to save your changes.

Next, create a new interface to be used for management.

  1. Go to System > Network > Interface > VLAN and select Add VLAN to create a management VLAN.


  2. Give the interface an appropriate name.
  3. Confirm that Interface is set to internal.
  4. Set a VLAN ID.
  5. In the IP/Netmask field, enter the IP address and netmask.
  6. Select the appropriate protocols to connect to the interface for administrative access.
  7. Optional. Select Add IP to add a secondary IP address for this VLAN.
  8. Select Add.
Using the CLI:

config system interface

edit internal

set ip <IP_address_and_netmask>

set allowaccess <access_types>

set type physical

set secondary-IP enable

config secondaryip

edit <id>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

next

end

next

edit <vlan name>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

set interface internal

set vlanid <VLAN id>

set secondary-IP enable

config secondaryip

edit <id>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

end

end

Models without a dedicated management port

For FortiSwitch models without a dedicated management port, configure the internal interface as the management port.

NOTE: For FortiSwitch models without a dedicated management port, the internal interface has a default VLAN ID of 1.

Using the GUI:

First start by editing the default internal interface’s configuration.

  1. Go to System > Network > Interface > Physical, select Edit for the internal interface.


  2. In the IP/Netmask field, enter the IP address and netmask.
  3. Select the appropriate protocols to connect to the interface for administrative access.
  4. Optional. Select Add IP to add a secondary IP address for the internal interface.
  5. Select Update to save your changes.

Next, create a new interface to be used for management.

  1. Go to System > Network > Interface > VLAN and select Add VLAN to create a management VLAN.


  2. Give the interface an appropriate name.
  3. Confirm that Interface is set to internal.
  4. Set a VLAN ID.
  5. In the IP/Netmask field, enter the IP address and netmask.
  6. Select the appropriate protocols to connect to the interface for administrative access.
  7. Optional. Select Add IP to add a secondary IP address for this VLAN.
  8. Select Add.
Using the CLI:

config system interface

edit internal

set ip <IP_address_and_netmask>

set allowaccess <access_types>

set type physical

set secondary-IP enable

config secondaryip

edit <id>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

next

end

next

edit <vlan name>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

set interface internal

set vlanid <VLAN id>

set secondary-IP enable

config secondaryip

edit <id>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

end

end