Fortinet white logo
Fortinet white logo

Administration Guide

Example configurations

Example configurations

In this example, the internal interface is used as an inbound management interface. Also, the FortiSwitch unit has a default VLAN across all physical ports and its internal port.

Using the internal interface of a FortiSwitch-524D-FPOE

Syntax

config system interface

edit internal

set ip 192.168.1.99 255.255.255.0

set allowaccess ping https http ssh

set type physical

end

end

In this example, an out-of-band management interface is used as the dedicated management port. You can configure the management port for local or remote access.

Out-of-band management on a FortiSwitch-1024D

Option 1: management port with static IP

config system interface

edit mgmt

set mode static

set ip 10.105.142.19 255.255.255.0

set allowaccess ping https http ssh snmp telnet

set type physical

next

edit internal

set type physical

end

end

// optional configuration to allow remote access to the management port

config router static

edit 1

set device mgmt

set gateway 192.168.0.10

set status enable

end

Option 2: management port with IP assigned by DHCP

config system interface

edit mgmt

set mode dhcp

set defaultgw enable // allows remote access

set allowaccess ping https http ssh snmp telnet

set type physical

next

edit internal

set type physical

end

Example configurations

Example configurations

In this example, the internal interface is used as an inbound management interface. Also, the FortiSwitch unit has a default VLAN across all physical ports and its internal port.

Using the internal interface of a FortiSwitch-524D-FPOE

Syntax

config system interface

edit internal

set ip 192.168.1.99 255.255.255.0

set allowaccess ping https http ssh

set type physical

end

end

In this example, an out-of-band management interface is used as the dedicated management port. You can configure the management port for local or remote access.

Out-of-band management on a FortiSwitch-1024D

Option 1: management port with static IP

config system interface

edit mgmt

set mode static

set ip 10.105.142.19 255.255.255.0

set allowaccess ping https http ssh snmp telnet

set type physical

next

edit internal

set type physical

end

end

// optional configuration to allow remote access to the management port

config router static

edit 1

set device mgmt

set gateway 192.168.0.10

set status enable

end

Option 2: management port with IP assigned by DHCP

config system interface

edit mgmt

set mode dhcp

set defaultgw enable // allows remote access

set allowaccess ping https http ssh snmp telnet

set type physical

next

edit internal

set type physical

end