Fortinet Document Library

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

Download PDF
Copy Link

Models without a dedicated management port

For FortiSwitch models without a dedicated management port, configure the internal interface as the management port.

NOTE: For FortiSwitch models without a dedicated management port, the internal interface has a default VLAN ID of 1.

Using the GUI:

First start by editing the default internal interface’s configuration.

  1. Go to System > Network > Interface > Physical, select Edit for the internal interface.


  2. In the IP/Netmask field, enter the IP address and netmask.
  3. Select the appropriate protocols to connect to the interface for administrative access.
  4. Optional. Select Add IP to add a secondary IP address for the internal interface.
  5. Select Update to save your changes.

 

Next, create a new interface to be used for management.

  1. Go to System > Network > Interface > VLAN and select Add VLAN to create a management VLAN.


  2. Give the interface an appropriate name.
  3. Confirm that Interface is set to internal.
  4. Set a VLAN ID.
  5. In the IP/Netmask field, enter the IP address and netmask.
  6. Select the appropriate protocols to connect to the interface for administrative access.
  7. Optional. Select Add IP to add a secondary IP address for this VLAN.
  8. Select Add.
Using the CLI:

config system interface

edit internal

set ip <IP_address_and_netmask>

set allowaccess <access_types>

set type physical

set secondary-IP enable

config secondaryip

edit <id>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

next

end

next

edit <vlan name>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

set interface internal

set vlanid <VLAN id>

set secondary-IP enable

config secondaryip

edit <id>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

end

end

Models without a dedicated management port

For FortiSwitch models without a dedicated management port, configure the internal interface as the management port.

NOTE: For FortiSwitch models without a dedicated management port, the internal interface has a default VLAN ID of 1.

Using the GUI:

First start by editing the default internal interface’s configuration.

  1. Go to System > Network > Interface > Physical, select Edit for the internal interface.


  2. In the IP/Netmask field, enter the IP address and netmask.
  3. Select the appropriate protocols to connect to the interface for administrative access.
  4. Optional. Select Add IP to add a secondary IP address for the internal interface.
  5. Select Update to save your changes.

 

Next, create a new interface to be used for management.

  1. Go to System > Network > Interface > VLAN and select Add VLAN to create a management VLAN.


  2. Give the interface an appropriate name.
  3. Confirm that Interface is set to internal.
  4. Set a VLAN ID.
  5. In the IP/Netmask field, enter the IP address and netmask.
  6. Select the appropriate protocols to connect to the interface for administrative access.
  7. Optional. Select Add IP to add a secondary IP address for this VLAN.
  8. Select Add.
Using the CLI:

config system interface

edit internal

set ip <IP_address_and_netmask>

set allowaccess <access_types>

set type physical

set secondary-IP enable

config secondaryip

edit <id>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

next

end

next

edit <vlan name>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

set interface internal

set vlanid <VLAN id>

set secondary-IP enable

config secondaryip

edit <id>

set ip <IP_address_and_netmask>

set allowaccess <access_types>

end

end