Skip to main content
JohnDevNet_FTNT
Staff
JohnDevNet_FTNT
Staff
January 23, 2016

Technical Tip: How to control allowed IP addresses for accessing FortiADC

  • January 23, 2016
  • 0 replies
  • 1561 views

Description

 
This article describes how to specify allowed subnets for accessing FortiADC over different access options, such as SSH, HTTP, HTTPs, etc.
 
Scope
 
FortiADC.
 
Solution
 
  1. Go to Network -> Interface and select the interface where access will be allowed.
  2. Enable the access options wanted to be enabled, the Trust IP address, and select Save.

    Enable options and trust IP address.PNG                                           
  3. Add the allowed subnets to the Trust IP Address List:
                                             
    Add subnets.PNG

 

When testing using an IP address that is not a member of the Trust IP Address List:

 

test when using an IP address outside trusted IP addresses.PNG

 

If it is required to allow access for a specific administrator account using a specific IP address, this can be performed by editing the administrator account:

 

Specifying allowed access for specific users.PNG

 

After testing using the administrator account but using a different source IP address, the following error will be witnessed:

 

test when blocking on administrator account level.PNG

 

See the FortiADC 7.6.1 administration guide for more information.

Terms & ConditionsAccessibility statement